hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Wittenauer (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-7214) Hadoop /usr/bin/groups equivalent
Date Tue, 05 Apr 2011 20:01:05 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-7214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13016096#comment-13016096
] 

Allen Wittenauer commented on HADOOP-7214:
------------------------------------------

My conclusion is simple:  if there is an easy fix for this, go for it.  But if we're inventing
a bunch of tool-age to support brokenness, I think it is bad to add the weight long term (yes,
this includes RESTs, RPCs, etc, etc).  Thus why I'd rather just say say that we show the groups
in the job conf and let it go at that.

BTW, it is also perfectly reasonable to expect that companies that decide to have split naming
services to provide ways to query that information on their own.  There could be some potential
security issues that we might be circumventing by providing that information out-of-band.

The other thing to keep in mind that going down the path of 'hadoop groups' is too limiting.
 If we are going to provide group information, why not also provide uid, username, etc.  In
the case of a kerberized environment, there is no guarantee that the TGT info matches what
is actually executed on the compute nodes due to remapping...



> Hadoop /usr/bin/groups equivalent
> ---------------------------------
>
>                 Key: HADOOP-7214
>                 URL: https://issues.apache.org/jira/browse/HADOOP-7214
>             Project: Hadoop Common
>          Issue Type: New Feature
>    Affects Versions: 0.23.0
>            Reporter: Aaron T. Myers
>            Assignee: Aaron T. Myers
>
> Since user -> groups resolution is done on the NN and JT machines, there should be
a way for users to determine what groups they're a member of from the NN's and JT's perspective.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message