We have hdfs groups command to troubleshoot issues related to users' group member look up with Unix/LDAP. However, there are some limitation of this command: 1) it can only be executed when namenode is running. 2) any change in the group mapping lookup configuration needs a hdfs namenode restart, which is expensive.
This ticket is proposed to have a simple CLI utility like HadoopKerberosName
The CLI utility for group member lookup will have a usage like below without namenode running or restart for configuration change.