Ranger KMS Property Clarification

[#1]

Hi,

I have 4 node kerberos enabled cluster in that I have installed ranger kms. There is hadoop.kms.key.provider.uri property in config file. Can someone please explain me know what is the use of this property?

And currently I have set that as dbks://http@localhost:9292/kms. Is that correct in four node cluster? or should I give ranger hostname instead of ranger host?

Thanks

[#2 · Accepted solution]

@Ankit Tripathi

Hadoop KMS is a cryptographic key management server based on Hadoop's KeyProvider API.It provides a client which is a KeyProvider implementation that interacts with the KMS using the HTTP REST API.

The value set looks good, Unless you are running hdp in cluster mode.

If you have more than 1 machine in cluster i will suggest to use hostname instead of localhost.