Uploaded image for project: 'Atlas'
  1. Atlas
  2. ATLAS-2557

Fix to allow to lookup hadoop ldap groups when are groups from UGI are wrongly set or are not empty

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.8.2
    • 1.0.0, 0.8.3
    • None
    • None

    Description

      Currently, groups from hadoop mapping are read only when grantedAuths from UGi is empty, but there is a case when groups synced in ugi are wrong or incomplete, in this case reading groups from hadoop ldap group mapping can help to get all groups.
       
      consider below example for ldap user hr1 who has hadoop-users, hr, hr1 in ldap
       
      [root@log111 ~]# id hr1
      uid=1014(hr1) gid=1014(hr1) groups=1014(hr1)
       
      groups read from UGI is hr1
       
      ----------------------------------------------------------------
       
      [root@log111 ~]# hdfs groups hr1
      hr1 : hadoop-users hr hr1
       
      groups read from hadoop ldap group mapping 

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            nixon Nixon Rodrigues
            nixon Nixon Rodrigues
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment