question Re: Cannot Create Key in Ranger KMS in Archives of Support Questions (Read Only)

Cannot Create Key in Ranger KMS

yjiang — Fri, 27 May 2016 15:44:15 GMT

keyadmin user failed to create keys in Ranger KMS. Found the below in kms-audit.log:

2016-05-27 05:58:59,555 UNAUTHENTICATED RemoteHost:10.0.0.163 Method:POST URL:http://xxx:9292/kms/v1/keys?user.name=keyadmin ErrorMsg:'Authentication required'

This is a Kerberos enabled cluster. Following the install document, I have already created keyadmin principal in Kerberos and did the setting in Ranger KMS to use kerberos authentication. I was able to log in into Ranger KMS, but failed creating keys with above UNAUTHENTICATED error.

Although I have keyadmin user created on Ranger user sync node and configured Ranger usersync to use Unix sync, but I couldn't find keyadmin user in Ranger User tab. I am not sure if this relates to the KMS error.

Any idea to solve this?

Thanks,

Re: Cannot Create Key in Ranger KMS

rpathak — Fri, 27 May 2016 17:49:07 GMT

Hi @yjiang

Can you try restarting all Ranger services.

Both Ranger KMS and Ranger Admin.

Also verify from Ranger KMS UI that you can see correct principal in Ranger KMS repository configuration.

It should be something like keyadmin@REALM.COM

Re: Cannot Create Key in Ranger KMS

yjiang — Fri, 27 May 2016 23:53:02 GMT

Hi @Rahul Pathak

I tried restarting all Ranger services but it didn't change the status.

I attached my configuration.

kms-repo-conf.png

ranger-users.png

ranger-permission.png

Re: Cannot Create Key in Ranger KMS

yjiang — Sat, 28 May 2016 08:33:20 GMT

I solved this issue by change username to keyadmin@REALM.COM from Ranger KMS repository config UI directly.

Configuring this in Ambari Ranger KMS UI and restarting Ranger and Ranger KMS services didn't apply to the actual KMS repository config property.

Re: Cannot Create Key in Ranger KMS

avijeetd — Thu, 18 Aug 2016 19:46:17 GMT

@yjiang

Hi, I am having this issue, can you please describe where you changed the username. I have put it in the Ranger-kms / Config / Advanced-kms-properties as keyadmin@REALM.COM

But it is not working, and same error persists.

Thanks for your help.

Avijeet

Re: Cannot Create Key in Ranger KMS

vi1 — Wed, 25 Jan 2023 09:04:55 GMT

Hey I am getting error while adding new key to ranger kms web UI..it is saying HTTP STATUS 401-UNAUTHORIZED

Re: Cannot Create Key in Ranger KMS

VidyaSargur — Wed, 25 Jan 2023 10:19:55 GMT

@vi1, as this is an older post, you would have a better chance of receiving a resolution by starting a new thread. This will also be an opportunity to provide details specific to your environment that could aid others in assisting you with a more accurate answer to your question. You can link this thread as a reference in your new post.