Re: HDFS User impersonation on encrypted zone | Ranger KMS

2018-08-03 Thread Sandeep Nemuri
+1 for KMS proxy user settings. On Fri, 3 Aug 2018 at 1:42 AM, Ashish Tadose wrote: > Thanks a ton, will try this out. > > On Fri, 3 Aug 2018 at 1:12 AM, Wei-Chiu Chuang wrote: > >> Hi, this is a supported use case. >> Please make sure you configure the KMS proxy user correctly as well (it >>

Re: HDFS User impersonation on encrypted zone | Ranger KMS

2018-08-02 Thread Ashish Tadose
Thanks a ton, will try this out. On Fri, 3 Aug 2018 at 1:12 AM, Wei-Chiu Chuang wrote: > Hi, this is a supported use case. > Please make sure you configure the KMS proxy user correctly as well (it is > separately from HDFS proxy user settings) > >

Re: HDFS User impersonation on encrypted zone | Ranger KMS

2018-08-02 Thread Wei-Chiu Chuang
Hi, this is a supported use case. Please make sure you configure the KMS proxy user correctly as well (it is separately from HDFS proxy user settings) https://hadoop.apache.org/docs/current/hadoop-kms/index.html#KMS_Proxyuser_Configuration On Thu, Aug 2, 2018 at 12:30 PM Ashish Tadose wrote: >

HDFS User impersonation on encrypted zone | Ranger KMS

2018-08-02 Thread Ashish Tadose
Hi, Does HDFS user impersonation work on HDFS encrypted zone backed by ranger KMS? Our Hadoop environment configured with Kerberos and also supports creating an encrypted zone in HDFS by ranger KMS. Specific application id has HDFS user impersonation access to impersonate users of a certain