RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-22 Thread Dale Bradman
This looks to be a Ranger UI issue because I have been able to update my KMS policy successfully using the API. But I still am not sure if it is safe to allow the hdfs user the rights to “GENERATE_EEK” on my key? Thanks. Dale From: Dale Bradman [mailto:da...@profusion.com] Sent: 19 May 2017

RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Dale Bradman
Hi Sreeni, I have followed this guide previously before I upgraded the cluster from 2.4 to 2.5 which worked successfully. I’d be keen to get some feedback/suggestions on why it no longer works after the upgrade rather than working through it again. I cannot add any user to my Ranger KMS policy

Re: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Sreeni
Dale, Following hortonworks community guide helped me. How to correctly setup the HDFS encryption using Ranger KMS - Hortonworks | | | How to correctly setup the HDFS encryption using Ranger KMS - Hortonworks | | |  Sreeni On Friday, May 19, 2017 5:49 AM, Dale Bradman