Hadoop Common
  1. Hadoop Common
  2. HADOOP-8943

Support multiple group mapping providers

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.5.0
    • Component/s: security
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed
    • Tags:
      Group Mapping

      Description

      Discussed with Natty about LdapGroupMapping, we need to improve it so that:
      1. It's possible to do different group mapping for different users/principals. For example, AD user should go to LdapGroupMapping service for group, but service principals such as hdfs, mapred can still use the default one ShellBasedUnixGroupsMapping;

      2. Multiple ADs can be supported to do LdapGroupMapping;

      3. It's possible to configure what kind of users/principals (regarding domain/realm is an option) should use which group mapping service/mechanism.

      4. It's possible to configure and combine multiple existing mapping providers without writing codes implementing new one.

      1. hadoop-8943-v4.patch
        19 kB
        Kai Zheng
      2. hadoop-8943-v3.patch
        19 kB
        Kai Zheng
      3. hadoop-8943-v2.patch
        19 kB
        Kai Zheng
      4. HADOOP-8943.patch
        27 kB
        Kai Zheng
      5. HADOOP-8943.patch
        11 kB
        Kai Zheng
      6. HADOOP-8943.patch
        27 kB
        Kai Zheng

        Issue Links

          Activity

          No work has yet been logged on this issue.

            People

            • Assignee:
              Kai Zheng
              Reporter:
              Kai Zheng
            • Votes:
              1 Vote for this issue
              Watchers:
              16 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 504h
                504h
                Remaining:
                Remaining Estimate - 504h
                504h
                Logged:
                Time Spent - Not Specified
                Not Specified

                  Development