05-09-2017 02:41 PM
Restore method: HDFS 'cp' cmd
I was able to restore non-encrypted directory from a snapshot. However, I was not able to restore a snap on an encrypted directory. The error shows as follows:
cp: User:hdfs not allowed to do 'DECRYPT_EEK' on 'rawKey'
I checked KMS ACL, user hdfs and group supergroup are blacklisted.
<property> <name>hadoop.kms.blacklist.DECRYPT_EEK</name> <value>hdfs supergroup</value> </property>
What is the alternative? Can restore user be set to another user?