Member since
10-11-2017
3
Posts
0
Kudos Received
0
Solutions
05-22-2019
11:03 PM
Thank you @Vipin Rathor. Currently, I am trying to export a few EZK's to another Ranger KMS instance(on a different cluster). I found the exportKeysToJCEKS.sh from Ranger KMS scripts which has the downside that it exports all the EZK's to a JCEKS keystore. I have the following questions: Are the exported keys in the JCEKS keystore still encrypted with the Master Key To import these into the target Ranger KMS instance should the Master Key be same on both What's the best way to sync keys selectively between RangerKMS instances Another question again from the rangerkms db is regarding the records in ranger_keystore table. Why are two similar records there for every EZK (one with cipher AES and the other with AES/CTR/NoPadding and ending with <keyname>@0 ). Thank you in advance.
... View more
05-21-2019
06:48 AM
How are the ranger master keys stored inside ranger_masterkey table used in RangerKMS? Any documentation explaining this? Do they have any connection with the ZEKs in Ranger KMS?
... View more
Labels:
04-18-2019
01:46 AM
Probably too late to answer. Found a fix for this. But couldn't successfully compile DLM engine yet. Add the following to your ~/.m2/settings.xml <settings>
<mirrors>
<mirror>
<id>public</id>
<mirrorOf>*</mirrorOf>
<url>http://nexus-private.hortonworks.com/nexus/content/groups/public</url>
</mirror>
</mirrors>
</settings> Hopefully would help people reaching here in future. Ref: https://community.hortonworks.com/questions/157149/apache-ambari-error-during-maven-build-missing-ins.html
... View more