[HADOOP-10761] Provide an NFS gateway option to get groups from local name service for easy deployment in cloud

• Type: New Feature
• Status: Reopened
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0-alpha1
• Component/s: nfs
• Release Note: This patch uses ShellBasedUnixGroupsMapping to fetch Auxillary GID for the given UserName or UID. The purpose is to eliminate the LDAP integration at the client machines.
• Assignee: Unassigned
• Reporter: Brandon Li
• Created: 27/Jun/14 17:20
• Updated: 12/May/16 18:27

Description

In cloud deployment, client machines and Hadoop Cluster are sometimes in different DMZ and LDAP in some other. Integration client machines with LDAP might require lot of firewall tickets, which can be a pain especially when users keep on adding new client machines.

When the client is not integrated with LDAP for the group mapping, NFS should not use the group list in the request. Instead, NFS gateway can get the group list from local name service.

This JIRA is to track the effort to provide a configuration option to get list of GID from LDAP/OS for making the deployment at Cloud easier. Also this can remove the limitation of 15 GID in the NFS request.

Issue Links

• is related to: HADOOP-10701 NFS should not validate the access premission only based on the user's primary group