Have you tried after kinit ? ... View more

There is nothing specific to Hive Metastore in evaluating access to HDFS resources. If HDFS Ranger plugin is enabled, then Ranger policies in conjunction with HDFS ACLs will apply. If HDFS Ranger plugin is not enabled, only HDFS ACLs will apply. ... View more

Yes, that is a possibility. After enabling the kerberos, hostname needs to be used instead of IP address. ... View more

See if ranger admin process user has right permissions to access spnego keytab. ... View more

@Edgar Daeds In case you are using HA, please make sure to add load balancer principal to spnego keytab. See steps 32 onwards in http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_hadoop-high-availability/content/configure_ranger_admin_ha.html#configure_ranger_admin_ha_without_ssl Even with one Ranger admin, if you are seeing 401 in plugin side... 1] check if you have any error on ranger admin logs for authentication errors during policy download. 2] Verify keytab permissions. 3] Check policy.download.auth.users as mentioned by @Deepak Sharma above. ... View more

Ranger KMS provides an export utility script. Storing keys is multiple places will add risk though. ... View more

Do you have HA enabled for Ranger? ... View more

Please note DB based auditing is NOT supported from Ranger 0.6 (HDP 2.5) ... View more

EventTime timezone fix is available in Ranger 0.7.0. https://issues.apache.org/jira/browse/RANGER-1249 ... View more