[HDFS-7362] Proxy user refresh won't modify or remove existing groups or hosts from super user list

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.5.0
• Assignee: Eric Payne
• Reporter: Eric Payne
• Created: 05/Nov/14 22:08
• Updated: 10/Nov/14 16:08
• Resolved: 10/Nov/14 16:08

Description

2.x added a new DefaultImpersonationProvider class for reading the superuser
configuration. In this class, once the host and group properties for a proxyuser are defined, they cannot be removed or modified without bouncing the daemon.

As long as the config is updated correctly the first time, this problem won't manifest itself. Once defined, these properties don't tend to change. However, if the properties are mis-entered the first time, restarting the NN/RM/JHS/etc will be necessary to correctly re-read the config. An admin refresh won't do it.

Issue Links

• duplicates: HADOOP-10817 ProxyUsers configuration should support configurable prefixes