[#HADOOP-4656] Add a user to groups mapping service

Hadoop Common

Add a user to groups mapping service

Created: 13/Nov/08 10:15 PM Updated: Wednesday 10:59 PM

Return to search

Component/s:

security

Affects Version/s:

0.19.0

Fix Version/s:

None

Time Tracking:

Not Specified

File Attachments:

File Name	Date Attached	Attached By	Size
HADOOP-4656-1.patch	2009-11-24 09:27 PM	Boris Shkolnik	18 kB
HADOOP-4656-2.patch	2009-11-25 10:59 PM	Boris Shkolnik	19 kB
HADOOP-4656.patch	2009-10-08 08:04 AM	Arun C Murthy	14 kB
HADOOP-4656_0_20090108.patch	2009-01-08 09:16 AM	Arun C Murthy	7 kB

Issue Links:

Blocker

This issue blocks:

HADOOP-4850 Fix IPC Client to not use UGI

HADOOP-4343 Adding user and service-to-service authentication to Hadoop

MAPREDUCE-1083 Use the user-to-groups mapping service in the JobTracker

HDFS-685 Use the user-to-groups mapping service in the NameNode

Reference

This issue relates to:

HADOOP-4487 Security features for Hadoop

Description

« Hide

Currently the IPC client sends the UGI which contains the user/group information for the Server. However this represents the groups for the user on the client-end. The more pertinent mapping from user to groups is actually the one seen by the Server. Hence the client should only send the user and we should add a 'group mapping service' so that the Server can query it for the mapping.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

There are no subversion log entries for this issue yet.