[HADOOP-6864] Provide a JNI-based implementation of ShellBasedUnixGroupsNetgroupMapping (implementation of GroupMappingServiceProvider)

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.23.0
• Component/s: security
• Hadoop Flags: Incompatible change, Reviewed
• Assignee: Boris Shkolnik
• Reporter: Erik Steffl
• Created: 16/Jul/10 22:23
• Updated: 30/Dec/13 05:58
• Resolved: 24/Jan/11 23:59

Description

The netgroups implementation of GroupMappingServiceProvider (see ShellBasedUnixGroupsNetgroupMapping.java) does a fork of a unix command to get the netgroups of a user. Since the group resolution happens in the servers, this might be costly. This jira aims at providing a JNI-based implementation for GroupMappingServiceProvider.

Note that this is similar to what https://issues.apache.org/jira/browse/HADOOP-6818 does for implementation of GroupMappingServiceProvider that supports only unix groups.

Issue Links

• breaks: HDFS-1559 Add missing UGM overrides to TestRefreshUserMappings
• breaks: MAPREDUCE-2232 Add missing methods to TestMapredGroupMappingServiceRefresh
• is duplicated by: HADOOP-7033 getUserToGroupsMappingService is not thread safe
• is related to: HADOOP-6818 Provide a JNI-based implementation of GroupMappingServiceProvider
• relates to: HADOOP-7147 setnetgrent in native code is not portable
• relates to: HADOOP-10194 CLONE - setnetgrent in native code is not portable
• relates to: HADOOP-6855 Add ability to get groups for ACLs from 'getent netgroup'