Hi team, I have couple of questions on functionality. What I have expected to using Ranger KMS is when the data is written in encrypted zone, the data should be in human readable but as below: $ hdfs dfs -get /data/protegrity/data4.dat ./encrypted_data4.dat
$ cat encrypted_data4.dat
1AY&SX—“#„bd3ƒ'• DE_ENC256®XQy”ª8@¿UuaùfšÆe4@ãoNVÕh¡}69þC$8¤ÌªÒÓ»Ö]\GR®´éXûš™?âëD
}‹]ê~+¨ÑN•Ä²z?iÄÝ 5ùDüt.ïÆ,+í/–öõZ9õXÙ+]R_#Ä×â6>
¦KÂœÌ'„J çÜÑâ,OzÝi.Ú^4WG±´±
2P‹qããE¼iåsLH'xH×oÚ6_ˆ'„ôE¦¯î©{_Hç˃ðîËíÒ†t¾+’:ÁÓ‡›°àå7¢@fH“9¾XTd/F'Îc9«þí òûHýÁN‰QO4y5ànG¤wš2¢»< Is this possible using Ranger KMS? Secondly is it possible to do column level encryption in Hive/HBase using Ranger KMS? Example as below: 0: jdbc:hive2://hortonworks.com> select * from table4;
+------------+---------------+---------------+-----------------------+------------------------+---------------------+
| table4.id | table4.fname | table4.lname | table4.fake_prim_nss | table4.fake_secnd_nss | table4.fake_bod_dt |
+------------+---------------+---------------+-----------------------+------------------------+---------------------+
| 1 | Sridhar | Reddy | 123456789 | 123456789 | 1990-03-23 |
| 2 | Happy | Tom | 234567890 | 234567890 | 1971-02-10 |
| 3 | Jun | Yu | 345678901 | 345678901 | 1972-10-23 |
+------------+---------------+---------------+-----------------------+------------------------+---------------------+
5 rows selected (0.255 seconds)
0: jdbc:hive2://hortonworks.com> select id, fname, lname, ptyProtectStr(cast(fake_prim_nss as string),'DE_nss23') as fake_prim_nss, fake_secnd_nss, fake_bod_dt, fake_bod_tms from table4;
+-----+---------+--------+----------------+-----------------+--------------+
| id | fname | lname | fake_prim_nss | fake_secnd_nss | fake_bod_dt |
+-----+---------+--------+----------------+-----------------+--------------+
| 2 | Happy | Tom | 682585704 | 234567890 | 1971-02-10 |
| 1 | Sridhar | Reddy | 115506653 | 123456789 | 1990-03-23 |
| 3 | Jun | Yu | 874950339 | 345678901 | 1972-10-23 |
+-----+---------+--------+----------------+-----------------+--------------+ Thirdly, how Ranger KMS will honor when you set hive doAs=false. Any needful help is highly appreciated. Thanks in advance.
... View more
