Description
We have hdfs groups command to troubleshoot issues related to users' group member look up with Unix/LDAP. However, there are some limitation of this command: 1) it can only be executed when namenode is running. 2) any change in the group mapping lookup configuration needs a hdfs namenode restart, which is expensive.
This ticket is proposed to have a simple CLI utility like HadoopKerberosName
hadoop org.apache.hadoop.security.HadoopKerberosName nn/localhost@HDPDEV.DEV.COM
The CLI utility for group member lookup will have a usage like below without namenode running or restart for configuration change.
hadoop org.apache.hadoop.security.Groups hdfs hdfs : [hadoop, hdfs]