RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-22 Thread Dale Bradman
This looks to be a Ranger UI issue because I have been able to update my KMS policy successfully using the API. But I still am not sure if it is safe to allow the hdfs user the rights to “GENERATE_EEK” on my key? Thanks. Dale From: Dale Bradman [mailto:da...@profusion.com] Sent: 19 May 2017

RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Dale Bradman
Hi Sreeni, I have followed this guide previously before I upgraded the cluster from 2.4 to 2.5 which worked successfully. I’d be keen to get some feedback/suggestions on why it no longer works after the upgrade rather than working through it again. I cannot add any user to my Ranger KMS policy

Re: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Sreeni
Dale, Following hortonworks community guide helped me. How to correctly setup the HDFS encryption using Ranger KMS - Hortonworks | | | How to correctly setup the HDFS encryption using Ranger KMS - Hortonworks | | |  Sreeni On Friday, May 19, 2017 5:49 AM, Dale Bradman

Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Dale Bradman
Hello. I've recently upgraded the cluster to HDP 2.5.3 as well as Ambari to 2.4.2.0 however I'm now facing problems running Hive queries. Each query that invokes Tez (i.e. `insert`) results in the following error: Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: