Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10851

NetgroupCache does not remove group memberships

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.4.1
    • Fix Version/s: 2.6.0
    • Component/s: security
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      NetgroupCache is used by GroupMappingServiceProvider implementations based on net groups.
      But it has a serious flaw in that once a user to group membership is established, it remains forever even if user is actually removed from the netgroup and cache is cleared. It is cleared only if the server is restarted.

      To reproduce this:

      • Cache a group with a set of users.
      • Test membership correctness.
      • Clear cache, remove a user from the group and cache the group again
      • Expected result : user’s groups should not include the group from which he/she is removed.
      • Actual result : user’s groups includes the group from which he/she was removed.

      It is also noted that NetgroupCache has concurrency issues and a separate jira is filed to rectify them.

        Attachments

        1. HADOOP-10851.patch
          6 kB
          Benoy Antony

          Issue Links

            Activity

              People

              • Assignee:
                benoyantony Benoy Antony
                Reporter:
                benoyantony Benoy Antony
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: