Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9968

ProxyUsers does not work with NetGroups

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.5.0
    • security
    • None

    Description

      It is possible to use NetGroups for ACLs. This requires specifying the config property hadoop.security.group.mapping as org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.

      The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not work if we are using NetGroups.

      Attachments

        1. HADOOP-9968.patch
          6 kB
          Benoy Antony
        2. HADOOP-9968.patch
          5 kB
          Benoy Antony
        3. HADOOP-9968.patch
          5 kB
          Benoy Antony
        4. hadoop-9968-1.2.patch
          5 kB
          Benoy Antony

        Activity

          People

            benoyantony Benoy Antony
            benoyantony Benoy Antony
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: