Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-8943

Support multiple group mapping providers

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.5.0
    • Component/s: security
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed
    • Tags:
      Group Mapping

      Description

      Discussed with Natty about LdapGroupMapping, we need to improve it so that:
      1. It's possible to do different group mapping for different users/principals. For example, AD user should go to LdapGroupMapping service for group, but service principals such as hdfs, mapred can still use the default one ShellBasedUnixGroupsMapping;

      2. Multiple ADs can be supported to do LdapGroupMapping;

      3. It's possible to configure what kind of users/principals (regarding domain/realm is an option) should use which group mapping service/mechanism.

      4. It's possible to configure and combine multiple existing mapping providers without writing codes implementing new one.

        Attachments

        1. HADOOP-8943.patch
          27 kB
          Kai Zheng
        2. HADOOP-8943.patch
          11 kB
          Kai Zheng
        3. HADOOP-8943.patch
          27 kB
          Kai Zheng
        4. hadoop-8943-v2.patch
          19 kB
          Kai Zheng
        5. hadoop-8943-v3.patch
          19 kB
          Kai Zheng
        6. hadoop-8943-v4.patch
          19 kB
          Kai Zheng

          Issue Links

            Activity

              People

              • Assignee:
                drankye Kai Zheng
                Reporter:
                drankye Kai Zheng
              • Votes:
                1 Vote for this issue
                Watchers:
                17 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 504h
                  504h
                  Remaining:
                  Remaining Estimate - 504h
                  504h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified