[RANGER-977] Ranger KMS default policies should include hdfs & hive

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.5.0
• Fix Version/s: 0.6.0
• Component/s: Ranger
• Assignee: Sailaja Polavarapu
• Reporter: Sailaja Polavarapu
• Created: 09/May/16 17:13
• Updated: 01/Jun/16 20:00
• Resolved: 01/Jun/16 20:00

Description

Currently when Ranger KMS is installed, only keyadmin user has the permissions.
Users have to manually create user nn and assign policies for this user for the encryption zone creation to work. This should be added by default. Also nn is a kerberos principal which should be mapped to hdfs user, for which default policy should be added after KMS is installed. (with generate_eek and get_matadata operations). Investigate why KMS is not performing this mapping and resolve it. In addition address this use-case for making hive encryption zones work as well.

Issue Links

• links to: Review request link