Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Please see the Cloudera blog for information on the Cloudera Response to CVE-2021-4428

Able to write files to an encryption zone but unable to read files from it

New Contributor

I was able to create an encryption zone on HDP and was able to write files into the zone using Talend ETL. However when I try to read files from the zone using the tool, I get the below error:

Exception in component tHDFSInput_1

java.io.IOException: No KeyProvider is configured, cannot access an encrypted file

at org.apache.hadoop.hdfs.DFSClient.decryptEncryptedDataEncryptionKey(DFSClient.java:1382)

at org.apache.hadoop.hdfs.DFSClient.createWrappedInputStream(DFSClient.java:1461)

at org.apache.hadoop.hdfs.DistributedFileSystem$4.doCall(DistributedFileSystem.java:332)

at org.apache.hadoop.hdfs.DistributedFileSystem$4.doCall(DistributedFileSystem.java:326)

at org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81)

at org.apache.hadoop.hdfs.DistributedFileSystem.open(DistributedFileSystem.java:326)

When I try to write and read files using the same Talend ETL user , using Hadoop dfs commands it works fine, implying the user has all the required permissions.

Please can some one guide me to the solution

2 REPLIES 2

Hi @PHANI TANGIRALA - do you have to provide configuration files to Talend in order to access your hadoop cluster? Can you check if the *-site.xml files have the following parameters configured correctly?

In core-site:

hadoop.security.key.provider.path

In hdfs-site:

dfs.encryption.key.provider.uri

Explorer

@Ana Gillan

I am also facing the same issue. I have already specified above mentioned properties in talend but still it is not working. I am able to access the files from edge node cli using talend sudo user but not from talend.

Thanks