Major Description
It is possible to use NetGroups for ACLs. This requires specifying the config property hadoop.security.group.mapping as org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not work if we are using NetGroups.