[ 
https://issues.apache.org/jira/browse/RANGER-977?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15310994#comment-15310994
 ] 

rangerqa commented on RANGER-977:
---------------------------------

{color:red}-1 overall{color}.  Here are the results of testing the latest 
attachment
  
http://issues.apache.org/jira/secure/attachment/12804875/0001-RANGER-977-Adding-hdfs-and-hive-policy-items-while-c.patch
  against master revision 220c132.

    {color:red}-1 patch{color}.  The patch command could not apply the patch.

Console output: 
https://builds.apache.org/job/PreCommit-RANGER-Build/236//console

This message is automatically generated.

> Ranger KMS default policies should include hdfs & hive
> ------------------------------------------------------
>
>                 Key: RANGER-977
>                 URL: https://issues.apache.org/jira/browse/RANGER-977
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.5.0
>            Reporter: Sailaja Polavarapu
>            Assignee: Sailaja Polavarapu
>             Fix For: 0.6.0
>
>         Attachments: 
> 0001-RANGER-977-Adding-hdfs-and-hive-policy-items-while-c.patch
>
>
> Currently when Ranger KMS is installed, only keyadmin user has the 
> permissions.
> Users have to manually create user nn and assign policies for this user for 
> the encryption zone creation to work. This should be added by default. Also 
> nn is a kerberos principal which should be mapped to hdfs user, for which 
> default policy should be added after KMS is installed. (with generate_eek and 
> get_matadata operations). Investigate why KMS is not performing this mapping 
> and resolve it. In addition address this use-case for making hive encryption 
> zones work as well.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to