Load / syncronize encrypted files
The following actions have to be performed when the files are encrypted:
- The user indexima proxy must be added in the ranger kms configuration.
CODE
hadoop.kms.proxyuser.indexima.groups ( * )
hadoop.kms.proxyuser.indexima.hosts ( * )- You must also assign the right DECRYPT_EEK to the user who uses impersonation.
Without proxy users we get an unauthorized error.
- Indexima corresponds to the main keytab.