Hi, we are doing some research on how to go for "Data at Rest Encryption" and "Data on wire Encryption" for Hbase. Right now we have explored Ranger KMS for encrypting data at rest in our hadoop cluster. I have a question that if we are moving to AWS , Since EBS will provide encryption of data at rest, is that sufficient or should Ranger KMS be also present in order to support encryption. Please provide some inputs on this to understand it better as how it works. Thanks ... View more

Hi, I am using Rangers to test the authorisation of Hbase tables by enabling Hbase plug-in. I have created few test users in my linux box and have used Ranger APIs to create policies to give specific permissions to my test users. Everything works fine. But I want to know If I can grant/revoke permissions through phoenix for those hbase tables. I have tried running grant command from phoenix, but it did not work. It threw me syntax error. I need to understand if this is possible while I have my Rangers running in my cluster. Thanks. ... View more

Hi, I am trying to take full backup using the command "hbase backup create full </local/path>". In my hbase , for testing purpose there is only one user table created and all others are default hbase tables. I am getting below ERROR when i run the backup command. Can someone please tell me what config i need to add inorder to resolve this timeout issue. Backup session finished. Status: FAILURE 2018-02-19 06:10:24,928 ERROR [main] util.AbstractHBaseTool: Error running command-line tool org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.hbase.errorhandling.ForeignException): org.apache.hadoop.hbase.errorhandling.TimeoutException: Timeout elapsed! Source:Timeout caused Foreign Exception Start:1519020556896, End:1519020616896, diff:60000, max:60000 ms at org.apache.hadoop.hbase.errorhandling.ForeignExceptionDispatcher.rethrowException(ForeignExceptionDispatcher.java:83) at org.apache.hadoop.hbase.backup.master.LogRollMasterProcedureManager.execProcedure(LogRollMasterProcedureManager.java:129) at org.apache.hadoop.hbase.master.procedure.MasterProcedureUtil.execProcedure(MasterProcedureUtil.java:93) at org.apache.hadoop.hbase.backup.master.FullTableBackupProcedure.executeFromState(FullTableBackupProcedure.java:525) at org.apache.hadoop.hbase.backup.master.FullTableBackupProcedure.executeFromState(FullTableBackupProcedure.java:69) at org.apache.hadoop.hbase.procedure2.StateMachineProcedure.execute(StateMachineProcedure.java:107) at org.apache.hadoop.hbase.procedure2.Procedure.doExecute(Procedure.java:500) at org.apache.hadoop.hbase.procedure2.ProcedureExecutor.execProcedure(ProcedureExecutor.java:1086) at org.apache.hadoop.hbase.procedure2.ProcedureExecutor.execLoop(ProcedureExecutor.java:888) at org.apache.hadoop.hbase.procedure2.ProcedureExecutor.execLoop(ProcedureExecutor.java:841) at org.apache.hadoop.hbase.procedure2.ProcedureExecutor.access$200(ProcedureExecutor.java:77) at org.apache.hadoop.hbase.procedure2.ProcedureExecutor$1.run(ProcedureExecutor.java:443) I have already tried adding below property in my hbase-site.xml file, but I still get the timeout issue <property> <name>hbase.snapshot.region.timeout</name> <value>300000</value> </property> ... View more

Hi, I have upgraded my HDP to 2.6.2 version and testing Rangers 0.7. I have added a new user using Rest API from the host machine as below curl -u admin:admin -v -i -s -X POST -H "Accept: application/json" -H "Content-Type: application/json" http://localhost:6080/service/xusers/users -d @/file_path/newuser.json The above command executed successfully creating new user with and id = 23, so when I used the below curl command to get this user, it shows me the recently added user, But Ranger UI does not show the new user added. Can anyone please tell me why it is happening. curl -u admin:admin -v -i -s -X GET http://localhost:6080/service/xusers/users/23 Thanks. ... View more