Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9968

ProxyUsers does not work with NetGroups

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.5.0
    • Component/s: security
    • Labels:
      None
    • Target Version/s:

      Description

      It is possible to use NetGroups for ACLs. This requires specifying the config property hadoop.security.group.mapping as org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.

      The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not work if we are using NetGroups.

        Attachments

        1. HADOOP-9968.patch
          6 kB
          Benoy Antony
        2. HADOOP-9968.patch
          5 kB
          Benoy Antony
        3. hadoop-9968-1.2.patch
          5 kB
          Benoy Antony
        4. HADOOP-9968.patch
          5 kB
          Benoy Antony

          Activity

            People

            • Assignee:
              benoyantony Benoy Antony
              Reporter:
              benoyantony Benoy Antony
            • Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: