Support Questions

Find answers, ask questions, and share your expertise
Announcements
Now Live: Explore expert insights and technical deep dives on the new Cloudera Community BlogsRead the Announcement

Able to write into an encryption zone but unable to read from it

avatar
New Member

I was able to create an encryption zone on HDP and was able to write files into the zone using Talend ETL. However when I try to read files from the zone using the tool, I get the below error:

Exception in component tHDFSInput_1

java.io.IOException: No KeyProvider is configured, cannot access an encrypted file

at org.apache.hadoop.hdfs.DFSClient.decryptEncryptedDataEncryptionKey(DFSClient.java:1382)

at org.apache.hadoop.hdfs.DFSClient.createWrappedInputStream(DFSClient.java:1461)

at org.apache.hadoop.hdfs.DistributedFileSystem$4.doCall(DistributedFileSystem.java:332)

at org.apache.hadoop.hdfs.DistributedFileSystem$4.doCall(DistributedFileSystem.java:326)

at org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81)

at org.apache.hadoop.hdfs.DistributedFileSystem.open(DistributedFileSystem.java:326)

When I try to write and read files using the same Talend ETL user , using Hadoop dfs commands it works fine, implying the user has all the required permissions.

Please can some one guide me to the solution

1 REPLY 1

avatar

Check hadoop.security.key.provider.path in core-site.xml and dfs.encryption.key.provider.uri in hdfs-site.xml. They have to be configured to point to the KMS URI.