[HADOOP-13102] Update GroupsMapping documentation to reflect the new changes

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.0
• Fix Version/s: 2.9.0, 3.0.0, 3.1.0
• Component/s: documentation
• Labels: docs ldap
• Target Version/s: 2.9.0
• Hadoop Flags: Reviewed
• Assignee: Esther Kundin
• Reporter: Anu Engineer
• Created: 05/May/16 16:22
• Updated: 11/Oct/17 23:33
• Resolved: 11/Oct/17 23:27

Description

We need to update this section in the groupsMapping.md

Line 84:

The implementation does not attempt to resolve group hierarchies. Therefore, a user must be an explicit member of a group object
in order to be considered a member.

With changes in Hadoop-12291 this is no longer true since we will have the ability to walk the group hierarchies.

We also should modify this line

Line :  81
It is possible to set a maximum time limit when searching and awaiting a result.
Set `hadoop.security.group.mapping.ldap.directory.search.timeout` to 0 if infinite wait period is desired. Default is 10,000 milliseconds (10 seconds).

we might want to document how the new settings affects the timeout.

and also add the new settings into this doc.

 <name>hadoop.security.group.mapping.ldap.search.group.hierarchy.levels</name>

Issue Links

• relates to: HADOOP-12291 Add support for nested groups in LdapGroupsMapping