[HADOOP-12793] Write a new group mapping service guide

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.2
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: documentation
• Labels: ldap supportability
• Target Version/s: 2.8.0
• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 10/Feb/16 22:07
• Updated: 02/Oct/19 17:13
• Resolved: 03/Mar/16 08:21

Description

LdapGroupsMapping has lots of configurable properties and is thus fairly complex in nature. HDFS Permissions Guide has a minimal introduction to LdapGroupsMapping, with reference to "More information on configuring the group mapping service is available in the Javadocs."

However, its Javadoc provides no information about how to configure it. Core-default.xml has descriptions for each property, but still lacks a comprehensive tutorial. Without a tutorial/guide, these configurable properties would be buried under the sea of properties.

Both Cloudera and HortonWorks has some information regarding LDAP group mapping:
http://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_ldap_grp_mappings.html
http://hortonworks.com/blog/hadoop-groupmapping-ldap-integration/
But neither cover all configurable features, such as using SSL with LDAP, and POSIX group semantics.

Issue Links

• Dependent: HADOOP-9477 Add posixGroups support for LDAP groups mapping service
• Dependent: HADOOP-8121 Active Directory Group Mapping Service
• Dependent: HADOOP-12782 Faster LDAP group name resolution with ActiveDirectory