hadoop-common-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From aengin...@apache.org
Subject hadoop git commit: HADOOP-13102. Update GroupsMapping documentation to reflect the new changes. Contributed by Esther Kundin.
Date Wed, 11 Oct 2017 23:26:49 GMT
Repository: hadoop
Updated Branches:
  refs/heads/branch-3.0 52844ec0a -> beb54e527


HADOOP-13102. Update GroupsMapping documentation to reflect the new changes. Contributed by
Esther Kundin.

(cherry picked from commit 075358eb6fff5ae4a40ac4dfde292e2a9a4ceddf)


Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo
Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/beb54e52
Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/beb54e52
Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/beb54e52

Branch: refs/heads/branch-3.0
Commit: beb54e5279c0413cb796f25dfd9f1440e7071d69
Parents: 52844ec
Author: Anu Engineer <aengineer@apache.org>
Authored: Wed Oct 11 15:58:20 2017 -0700
Committer: Anu Engineer <aengineer@apache.org>
Committed: Wed Oct 11 16:24:08 2017 -0700

----------------------------------------------------------------------
 .../hadoop-common/src/site/markdown/GroupsMapping.md            | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/hadoop/blob/beb54e52/hadoop-common-project/hadoop-common/src/site/markdown/GroupsMapping.md
----------------------------------------------------------------------
diff --git a/hadoop-common-project/hadoop-common/src/site/markdown/GroupsMapping.md b/hadoop-common-project/hadoop-common/src/site/markdown/GroupsMapping.md
index 89aca16..806ed54 100644
--- a/hadoop-common-project/hadoop-common/src/site/markdown/GroupsMapping.md
+++ b/hadoop-common-project/hadoop-common/src/site/markdown/GroupsMapping.md
@@ -85,9 +85,10 @@ This file should be readable only by the Unix user running the daemons.
 
 It is possible to set a maximum time limit when searching and awaiting a result.
 Set `hadoop.security.group.mapping.ldap.directory.search.timeout` to 0 if infinite wait period
is desired. Default is 10,000 milliseconds (10 seconds).
+This is the limit for each ldap query.  If `hadoop.security.group.mapping.ldap.search.group.hierarchy.levels`
is set to a positive value, then the total latency will be bounded by max(Recur Depth in LDAP,
`hadoop.security.group.mapping.ldap.search.group.hierarchy.levels` ) * `hadoop.security.group.mapping.ldap.directory.search.timeout`.
 
-The implementation does not attempt to resolve group hierarchies. Therefore, a user must
be an explicit member of a group object
-in order to be considered a member.
+`hadoop.security.group.mapping.ldap.base` configures how far to walk up the groups hierarchy
when resolving groups.
+By default, with a limit of 0, in order to be considered a member of a group, the user must
be an explicit member in LDAP.  Otherwise, it will traverse the group hierarchy `hadoop.security.group.mapping.ldap.search.group.hierarchy.levels`
levels up.
 
 
 ### Active Directory ###


---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org


Mime
View raw message