question Re: Error moving data into an encryption zone in Archives of Support Questions (Read Only)

Error moving data into an encryption zone

wkrafft — Tue, 21 Apr 2026 13:45:21 GMT

Hello,

We have encrypted the hdfs /user directory in our cluster and are having issues when we try to execute a "hdfs dfs -rm" command on a file in the hdfs /tmp directory. We get a "can't be moved into an encryption zone" because it's trying the use the "users" trash folder under /user/ directory.

We can use -skipTrash and it works fine, but we DO want to use the .Trash folder.

I know we can't move data from an encrpytion zone into a non encrypted folder, but wasn't epecting the reverse.

We can use a distcp command to copy data from an un-encrypted directory into an encryption zone, so not sure why the -rm command does not.

We've verified permissions on the directories and the kms-acls.xml

Has anyone seen this issue?

Thanks!

Re: Error moving data into an encryption zone

seth — Tue, 28 Nov 2017 15:20:55 GMT

A new fix with changes will come out for HUE-7676 (internally CDH-62297)

Re: Error moving data into an encryption zone

weichiu — Tue, 28 Nov 2017 17:29:02 GMT

@seth The OP's problem does not seem like a Hue problem.

Re: Error moving data into an encryption zone

wkrafft — Tue, 28 Nov 2017 17:53:19 GMT

The error originated from Hue, which I failed to mention in my original post. We have tested that patch and it has solved our issue. Thanks!