https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131981#M94665 <P>any errors being shown catalina.out? are there entries in kms-audit.log?</P><P>as what user are you trying to copy the files?</P> Thu, 05 May 2016 20:43:59 GMT vperiasamy 2016-05-05T20:43:59Z https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131980#M94664 <P>Configured Ranger and KMS on a Kerberized cluster. Able to create zones and keys.However unable to cat any file put on the directory.</P><P>Have given the user access to directory in ranger and ability to decrypt eeks. Any ideas?</P><P>hdfs dfs -cat /zone_encr3/abc1.txt cat: org.apache.hadoop.security.authentication.client.AuthenticationException: Authentication failed, status: 500, message: Internal Server Error</P><P>Nothing much in kms.log either.</P> Thu, 05 May 2016 03:46:23 GMT https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131980#M94664 ashok_padmanabh 2016-05-05T03:46:23Z https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131981#M94665 <P>any errors being shown catalina.out? are there entries in kms-audit.log?</P><P>as what user are you trying to copy the files?</P> Thu, 05 May 2016 20:43:59 GMT https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131981#M94665 vperiasamy 2016-05-05T20:43:59Z https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131982#M94666 <P><A rel="user" href="https://community.cloudera.com/users/1457/ashokpadmanabhan.html" nodeid="1457">@Ash Pad</A></P><P>You need to provide additional privileges to the user via keyadmin. The user will need "Get Keys", "Get Metadata", and "Decrypt EEK" privileges on the key to read files in the encryption zone.</P> Wed, 11 May 2016 03:23:36 GMT https://community.cloudera.com/t5/Support-Questions/KMS-Unable-to-decrypt/m-p/131982#M94666 emaxwell 2016-05-11T03:23:36Z