Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10755

Support negative caching of user-group mapping

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.2.0
    • Fix Version/s: 2.6.0
    • Component/s: security
    • Labels:
      None

      Description

      We've seen a situation at a couple of our customers where interactions from an unknown user leads to a high-rate of group mapping calls. In one case, this was happening at a rate of 450 calls per second with the shell-based group mapping, enough to severely impact overall namenode performance and also leading to large amounts of log spam (prints a stack trace each time).

      Let's consider negative caching of group mapping, as well as quashing the rate of this log message.

        Attachments

        1. HDFS-5369.000.patch
          9 kB
          Lei (Eddy) Xu
        2. HADOOP-10755.004.patch
          16 kB
          Lei (Eddy) Xu
        3. HADOOP-10755.003.patch
          16 kB
          Lei (Eddy) Xu
        4. HADOOP-10755.002.patch
          10 kB
          Lei (Eddy) Xu
        5. HADOOP-10755.001.patch
          9 kB
          Lei (Eddy) Xu
        6. HADOOP-10755.000.patch
          9 kB
          Lei (Eddy) Xu

          Issue Links

            Activity

              People

              • Assignee:
                eddyxu Lei (Eddy) Xu
                Reporter:
                andrew.wang Andrew Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                10 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: