[HDFS-13521] NFS Gateway should support impersonation

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Wei-Chiu Chuang
• Created: 02/May/18 20:53
• Updated: 02/May/18 21:00

Description

Similar to HDFS-10481, NFS gateway and httpfs are independent processes that accept client connections.
NFS Gateway currently solves file permission/ownership problem by running as HDFS super user, and then call setOwner() to change file owner.

This is not desirable.

1. it adds additional RPC load to NameNode.
2. this does not support at-rest encryption, because by design, HDFS super user cannot access KMS.

This is yet another problem around KMS ACL. xiaochen rushabh.shah thoughts?

Issue Links

• relates to: HDFS-10481 HTTPFS server should correctly impersonate as end user to open file