question Re: Ranger KMS Tutorial in Archives of Support Questions (Read Only)

Ranger KMS Tutorial

avijeetd — Fri, 05 Aug 2016 16:43:26 GMT

Hi,

Is there a Ranger KMS tutorial that we can try?

Thanks,

Avijeet

Re: Ranger KMS Tutorial

myoung — Fri, 05 Aug 2016 21:26:34 GMT

@Avijeet Dash

You may find this HCC Article helpful: https://community.hortonworks.com/articles/49505/how-to-correctly-setup-the-hdfs-encryption-using-r.html

Re: Ranger KMS Tutorial

khadeermhmd — Wed, 19 Oct 2016 05:37:32 GMT

@Avijeet Dash I have installed ranger and ranger kms and setup all the configurations and everything is working fine.

I have created encryption zone in hdfs and in the policy i have mentioned two users(user 1 and user 2) to access this encryption zone, they are able to access this encryption zone . I want to set permissions to encryption zone in such a way that user1 should have read and write access and user 2 should have only read access?how can we define this ?

Re: Ranger KMS Tutorial

avijeetd — Wed, 19 Oct 2016 14:56:50 GMT

@khadeer mhmd

I believe the DECRYPT_EEK permission decides the read/write access, I don't think there are 2 different permissions. you migth try only read kind of permission using HDFS plugin.

Re: Ranger KMS Tutorial

Abbaz — Sat, 21 Jan 2017 01:23:11 GMT

@khadeer mhmd

The owner of the file has both the read and write access and the others will have only the read access.

Re: Ranger KMS Tutorial

java_etl_bigdat — Mon, 13 Feb 2017 20:03:15 GMT

Hi @khadeer mhmd, Have you installed Ranger KMS in HDP2.5 sandbox?

I am getting below error while adding Ranger KMS service in Ambari (HDP 2.5 sandbox).

Caught an exception while executing custom service command: <class 'ambari_agent.AgentException.AgentException'>: 'Script /var/lib/ambari-agent/cache/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms_server.py does not exist'; 'Script /var/lib/ambari-agent/cache/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms_server.py does not exist'

Could anyone please help me on this issue.