Hadoop Common
  1. Hadoop Common
  2. HADOOP-6527

UserGroupInformation::createUserForTesting clobbers already defined group mappings

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.1.0, 1-win
    • Component/s: security
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      In UserGroupInformation::createUserForTesting the follow code creates a new groups instance, obliterating any groups that have been previously defined in the static groups field.

          if (!(groups instanceof TestingGroups)) {
            groups = new TestingGroups();
          }
      

      This becomes a problem in tests that start a Mini

      {DFS,MR}

      Cluster and then create a testing user. The user that started the user (generally the real user running the test) immediately has their groups wiped out and is prevented from accessing files/folders/queues they should be able to. Before the UserGroupInformation.createRemoteUserForTesting, calls to userA.getGroups may return

      {"a", "b", "c"}

      and immediately after the new fake user is created, the same call will return an empty array.

        Issue Links

          Activity

          No work has yet been logged on this issue.

            People

            • Assignee:
              Ivan Mitic
              Reporter:
              Jakob Homan
            • Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development