Validating HA for ranger KMS

Question

Hi Team,

I enable HA for kms via installing multiple ranger kms instance and validated the scenario as follows .

1. Bring alternatively the instance having ranger kms installed i.e node1 is up and node 2 is down.

2. Go to ranger admin UI-> key encryption and check is all keys are displaying .its wrking as expected .

But when I do same thing via curl command it says need valid kerberos ticket and tomcat is nt able to authneticate .

Here my question may be silly but sorry for it "via ranger admin UI can display all valid keys then if we have proper kerberos ticket and permission for ranger kms to talk then it should behave as admin UI right ?

WIll my validation via ranger admin UI is enough

Answer 1

Hi@Shilpa,

It seems your user doesn't have the permission to authenticate. Try to run your curl command with the root account. It will work.