[HADOOP-11321] copyToLocal cannot save a file to an SMB share unless the user has Full Control permissions.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.7.0
• Component/s: fs
• Target Version/s: 2.7.0
• Hadoop Flags: Reviewed
• Assignee: Chris Nauroth
• Reporter: Chris Nauroth
• Created: 20/Nov/14 00:10
• Updated: 10/Apr/15 20:04
• Resolved: 16/Dec/14 23:45

Description

In Hadoop 2, it is impossible to use copyToLocal to copy a file from HDFS to a destination on an SMB share. This is because in Hadoop 2, the copyToLocal maps to 2 underlying RawLocalFileSystem operations: create and setPermission. On an SMB share, the user may be authorized for the create but denied for the setPermission. Windows denies the WRITE_DAC right required by setPermission unless the user has Full Control permissions. Granting Full Control isn't feasible for most deployments, because it's insecure. This is a regression from Hadoop 1, where copyToLocal only did a create and didn't do a separate setPermission.

Issue Links

• is related to: HADOOP-11415 Local file system on Linux may create files and directories initially with wider permissions than intended.
• is related to: HADOOP-11347 RawLocalFileSystem#mkdir and create should honor umask
• relates to: HADOOP-11349 RawLocalFileSystem leaks file descriptor while creating a file if creat succeeds but chmod fails.