Hadoop Common
  1. Hadoop Common
  2. HADOOP-10761

Provide an NFS gateway option to get groups from local name service for easy deployment in cloud

    Details

    • Type: New Feature New Feature
    • Status: Patch Available
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: 3.0.0
    • Fix Version/s: None
    • Component/s: nfs
    • Labels:
      None
    • Release Note:
      This patch uses ShellBasedUnixGroupsMapping to fetch Auxillary GID for the given UserName or UID. The purpose is to eliminate the LDAP integration at the client machines.

      Description

      In cloud deployment, client machines and Hadoop Cluster are sometimes in different DMZ and LDAP in some other. Integration client machines with LDAP might require lot of firewall tickets, which can be a pain especially when users keep on adding new client machines.

      When the client is not integrated with LDAP for the group mapping, NFS should not use the group list in the request. Instead, NFS gateway can get the group list from local name service.

      This JIRA is to track the effort to provide a configuration option to get list of GID from LDAP/OS for making the deployment at Cloud easier. Also this can remove the limitation of 15 GID in the NFS request.

      1. SysSecurityHandler.java
        3 kB
        Premchandra Preetham Kukillaya
      2. RpcProgramNfs3.java
        86 kB
        Premchandra Preetham Kukillaya
      3. patch.txt
        3 kB
        Premchandra Preetham Kukillaya

        Issue Links

          Activity

          Hide
          Premchandra Preetham Kukillaya added a comment -

          Patch for the changes.

          Note : In the core-site-xml the following property needs to be added if we want the second groups/auxiliary group to be retrieved using ShellBasedUnixGroupsMapping
          <property>
          <name>fetch_auxgid_using_shell</name>
          <value>true</value>
          </property>

          Show
          Premchandra Preetham Kukillaya added a comment - Patch for the changes. Note : In the core-site-xml the following property needs to be added if we want the second groups/auxiliary group to be retrieved using ShellBasedUnixGroupsMapping <property> <name>fetch_auxgid_using_shell</name> <value>true</value> </property>

            People

            • Assignee:
              Unassigned
              Reporter:
              Brandon Li
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:

                Development