hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aaron T. Myers (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-7214) Hadoop /usr/bin/groups equivalent
Date Sat, 09 Apr 2011 06:44:05 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-7214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13017809#comment-13017809

Aaron T. Myers commented on HADOOP-7214:

bq. In particular, I'm thinking of MS PACs, which I don't think are exposed in the same way
UNIX groups are. I can easily see someone implementing a user-to-group plug-in to use them,
given the staggering amount of Active Directory deployments. ... I think we likely have an
API issue.

Is your point that an implementation of this hypothetical plugin would want to only allow
a user to see their own groups, but not other user's? If so, these semantics can already be
implemented with the current API. The implementation of this MS PAC user-to-group plug-in
would need only to check the the currently logged-in user against the user for which the groups
are being requested, and either throw an error or return an empty list in the event they do
not match.

> Hadoop /usr/bin/groups equivalent
> ---------------------------------
>                 Key: HADOOP-7214
>                 URL: https://issues.apache.org/jira/browse/HADOOP-7214
>             Project: Hadoop Common
>          Issue Type: New Feature
>    Affects Versions: 0.23.0
>            Reporter: Aaron T. Myers
>            Assignee: Aaron T. Myers
>         Attachments: hadoop-7214.0.txt, hadoop-7214.1.txt, hadoop-7214.2.txt, hadoop-7214.3.txt,
> Since user -> groups resolution is done on the NN and JT machines, there should be
a way for users to determine what groups they're a member of from the NN's and JT's perspective.

This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

View raw message