[HDFS-14668] Support Fuse with Users from multiple Security Realms

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.1.0, 3.0.3
• Fix Version/s: 3.3.0, 3.1.4, 3.2.2
• Component/s: fuse-dfs
• Labels: regression
• Assignee: István Fajth
• Reporter: Sailesh Patel
• Created: 24/Jul/19 22:43
• Updated: 27/Feb/20 16:05
• Resolved: 27/Feb/20 16:02

Description

UPDATE:
See this comment for the complete description of what is happening here.

Users from non-default  krb5 domain can't use hadoop-fuse.
There are 2 Realms with kdc.
-one realm is for human users (USERS.COM.US)
-the other is for service principals. (SERVICE.COM.US)
Cross realm trust is setup.
In krb5.conf the default domain is set to SERVICE.COM.US

Users within USERS.COM.US Realm are not able to put any files to Fuse mounted location

The client shows:
cp: cannot create regular file ‘/hdfs_mount/tmp/hello_from_fuse.txt’: Input/output error

Issue Links

• is caused by: HADOOP-9747 Reduce unnecessary UGI synchronization
• links to: GitHub Pull Request #1739