hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alejandro Abdelnur (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-9968) ProxyUsers does not work with NetGroups
Date Wed, 12 Feb 2014 18:13:20 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13899366#comment-13899366

Alejandro Abdelnur commented on HADOOP-9968:

if/else should use always be within {}s even if a single statement.

Also, I don't understand why this change is necessary. Can you please explain? What is different
between the behavior of groups and netgroups.

> ProxyUsers does not work with NetGroups
> ---------------------------------------
>                 Key: HADOOP-9968
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9968
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HADOOP-9968.patch, HADOOP-9968.patch, hadoop-9968-1.2.patch
> It is possible to use NetGroups for ACLs. This requires specifying  the config property
hadoop.security.group.mapping as  org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping
or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
> The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups.
The Group resolution does not work  if we are using NetGroups.

This message was sent by Atlassian JIRA

View raw message