Hadoop HDFS
  1. Hadoop HDFS
  2. HDFS-5539 NFS gateway secuirty enhancement
  3. HDFS-6732

Fix inconsistent description in NFS user guide doc for proxy user

    Details

    • Type: Sub-task Sub-task
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Duplicate
    • Affects Version/s: 2.4.0
    • Fix Version/s: None
    • Component/s: documentation, nfs
    • Labels:
      None

      Description

      As Jeff Hansen pointed out in HDFS-5804, the user guide is misleading regarding the which user should start NFS gateway in secure or non-secure environment.

      With the fix in HDFS-5804, users don't have to use the same use to start NFS gateway and HDFS.

      One should always specify the following two properties regardless the HDFS cluster is secure or not: hadoop.proxyuser.nfsserver.groups and hadoop.proxyuser.nfsserver.hosts. As pointed out in the user guide, "nfsserver" should be replace by the user who starts NFS gateway.

      For secure HDFS cluster, it doesn't matter who starts NFS gateway. It's all about the user account in the keytab. In the above two properties, "nfsserver" should be replaced by the user in the keytab.

      1. HDFS-6732.001.patch
        5 kB
        Brandon Li
      2. HdfsNfsGateway.html
        31 kB
        Brandon Li

        Issue Links

          Activity

          Brandon Li created issue -
          Brandon Li made changes -
          Field Original Value New Value
          Link This issue relates to HDFS-5804 [ HDFS-5804 ]
          Brandon Li made changes -
          Description As [~dscheffy] pointed out in HDFS-5804, the user guide is misleading regarding the which user should start NFS gateway in secure or non-secure environment.

          With the fix in HDFS-5804, users don't have to use the same use to start NFS gateway and HDFS.

          One should always specify the following two properties regardless the HDFS cluster is secure or not: hadoop.proxyuser.nfsserver.groups and hadoop.proxyuser.nfsserver.hosts. As pointed out in the user guide, "nfsserver" should be replace by the user who starts NFS gateway.

          For secure HDFS cluster, it doesn't matter who starts NFS gateway. It's all about the user account in the keytab. In the above two properties, "nfsserver" should be replaced by the user in the keytab.
          Brandon Li made changes -
          Affects Version/s 2.4.0 [ 12326143 ]
          Brandon Li made changes -
          Attachment HDFS-6732.001.patch [ 12657228 ]
          Brandon Li made changes -
          Attachment HdfsNfsGateway.html [ 12657229 ]
          Hide
          Brandon Li added a comment -

          Uploaded a patch, which also fixed the rmax and wmax related descriptions. Also uploaded the generated html file for easy review.

          Show
          Brandon Li added a comment - Uploaded a patch, which also fixed the rmax and wmax related descriptions. Also uploaded the generated html file for easy review.
          Hide
          Brandon Li added a comment -

          Noticed Jeff Hansen already filed HDFS-6717. Close this one as a dup and move the patch over there.

          Show
          Brandon Li added a comment - Noticed Jeff Hansen already filed HDFS-6717 . Close this one as a dup and move the patch over there.
          Brandon Li made changes -
          Link This issue duplicates HDFS-6717 [ HDFS-6717 ]
          Brandon Li made changes -
          Status Open [ 1 ] Resolved [ 5 ]
          Resolution Duplicate [ 3 ]
          Brandon Li made changes -
          Link This issue is duplicated by HDFS-6717 [ HDFS-6717 ]
          Brandon Li made changes -
          Link This issue duplicates HDFS-6717 [ HDFS-6717 ]
          Transition Time In Source Status Execution Times Last Executer Last Execution Date
          Open Open Resolved Resolved
          23h 10m 1 Brandon Li 23/Jul/14 22:48

            People

            • Assignee:
              Brandon Li
              Reporter:
              Brandon Li
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development