hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Wittenauer (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-7214) Hadoop /usr/bin/groups equivalent
Date Sat, 02 Apr 2011 04:15:06 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-7214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13014948#comment-13014948

Allen Wittenauer commented on HADOOP-7214:

No, no. I'm thinking in a broader context.

If the naming services have been setup properly, the client, the NN, the JT, the datanodes,
etc, will be pulling consistent group definitions from a the same source.  Whether this is
files, NIS, LDAP, NetInfo, ...  is irrelevant.  If they aren't consistent, then the operating
environment is fundamentally broken.  [In fact, at large scales, they *must* be consistent
otherwise all sorts of bad things happen...]

Yes, I'm fully aware that some people don't do that.  But that's a bad practice and well,
it has its costs.  The inability to get group information from a server (Hadoop or otherwise)
being one of them.  I don't see much value in hacking a solution for something that people
shouldn't be doing.  

"It hurts when I do that."

"So don't do that."

FWIW, secured NFS has the exact same scenario.  Group membership is owned by the server, not
the client.

> Hadoop /usr/bin/groups equivalent
> ---------------------------------
>                 Key: HADOOP-7214
>                 URL: https://issues.apache.org/jira/browse/HADOOP-7214
>             Project: Hadoop Common
>          Issue Type: New Feature
>    Affects Versions: 0.23.0
>            Reporter: Aaron T. Myers
>            Assignee: Aaron T. Myers
> Since user -> groups resolution is done on the NN and JT machines, there should be
a way for users to determine what groups they're a member of from the NN's and JT's perspective.

This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

View raw message