[HADOOP-6855] Add ability to get groups for ACLs from 'getent netgroup'

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 0.22.0
• Fix Version/s: 0.20.3
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Erik Steffl
• Reporter: Erik Steffl
• Created: 09/Jul/10 00:31
• Updated: 24/Jun/11 23:23
• Resolved: 06/Jan/11 21:55

Description

Add ability to specify netgroups in ACLs (see class AccessControlList.java). Membership of users in netgroups will be determined by running 'getent negroups $groupName'. Netgroups will be differentiated from regular unix groups by having '@' as a first character.

Issue Links

• is related to: HADOOP-6864 Provide a JNI-based implementation of ShellBasedUnixGroupsNetgroupMapping (implementation of GroupMappingServiceProvider)