[
https://issues.apache.org/jira/browse/RANGER-4202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
rickboker updated RANGER-4202:
------------------------------
Description:
I set access policy as
{quote} {keyname: key1
user: user1
permissions:get create delete rollover
}{quote}
and when I use this user to rollover or delete key by hadoop command it will
return error.
ERROR INFORMATION:
{quote}Rolling key version from KeyProvider:
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
for key name: key1
Cannot roll key: key1 within KeyProvider:
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll <keyname> [-provider <provider>] [-strict] [-help]:
The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException:
User:user1
{quote}
was:
I set access policy as
{quote}{keyname: key1
user: user1
permissions: create get delete rollover
}
{quote}
and when I use this user to rollover or delete key by hadoop command it will
return error.
ERROR INFORMATION:
{quote}Rolling key version from KeyProvider:
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
for key name: key1
Cannot roll key: key1 within KeyProvider:
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll <keyname> [-provider <provider>] [-strict] [-help]:
The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException:
User:user1
{quote}
> return error using hadoop key roll command, when you set certian key ACL in
> rangeradmin.
> ----------------------------------------------------------------------------------------
>
> Key: RANGER-4202
> URL: https://issues.apache.org/jira/browse/RANGER-4202
> Project: Ranger
> Issue Type: Bug
> Components: kms
> Affects Versions: 2.3.0
> Reporter: rickboker
> Priority: Major
>
> I set access policy as
> {quote} {keyname: key1
> user: user1
> permissions:get create delete rollover
> }{quote}
> and when I use this user to rollover or delete key by hadoop command it will
> return error.
> ERROR INFORMATION:
> {quote}Rolling key version from KeyProvider:
> org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
> for key name: key1
> Cannot roll key: key1 within KeyProvider:
> org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
> roll <keyname> [-provider <provider>] [-strict] [-help]:
> The roll subcommand creates a new version for the specified key
> within the provider indicated using the -provider argument.
> If -strict is supplied, fail immediately if the provider requires
> a password and none is given.
> Executing command failed with the following exception:
> AuthorizationException: User:user1
> {quote}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
