[HDFS-14605] Note missing on expunge command description for encrypted zones

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 2.7.3, 2.7.5, 3.0.0, 3.1.0
• Fix Version/s: 2.7.3, 2.7.5, 3.0.0, 3.1.0
• Component/s: hdfs
• Labels: documentation-update
• Docs Text: We could add some message in the expunge command description saying that the command supports encrypted zone paths only when run as superuser and it will continue listing and performing the operation for all non encrypted hdfs paths.
• Assignee: Unassigned
• Reporter: Srinivasu Majeti
• Due: 05/Jul/19
• Created: 25/Jun/19 08:40
• Updated: 02/Oct/19 17:15
• Resolved: 03/Aug/19 06:43

Description

expunge command is supported for both encrypted and non-encrypted hdfs paths . This operation initially needs to discover/list all such paths. Listing/Discovering encrypted zone paths is only supported by superuser and expunge command misleads us by printing below message though its a warning . We could add some message in the expunge command description saying that the command supports encrypted zone paths only when run as superuser and it will continue listing and performing the operation for all non encrypted hdfs paths.

19/06/25 08:30:13 WARN hdfs.DFSClient: Cannot get all encrypted trash roots
org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.AccessControlException): Access denied for user ambari-qa. Superuser privilege is required
at org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkSuperuserPrivilege(FSPermissionChecker.java:130)

Issue Links

• duplicates: HDFS-12484 Undefined -expunge behavior after 2.8