hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Wittenauer (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-13673) Update scripts to be smarter when running with privilege
Date Thu, 12 Jan 2017 01:44:17 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-13673?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Allen Wittenauer updated HADOOP-13673:
--------------------------------------
    Release Note: Apache Hadoop is now able to switch to the appropriate user prior to launching
commands so long as the command is being run with a privileged user and the appropriate set
of _USER variables are defined.  This re-enables sbin/start-all.sh and sbin/stop-all.sh as
well as fixes the sbin/start-dfs.sh and sbin/stop-dfs.sh to work with both secure and unsecure
systems.  (was: Apache Hadoop is now able to switch to the appropriate user prior to launching
commands so long as the command is being run with a privileged user and the appropriate _USER
variable is set.  This re-enables sbin/start-all.sh, sbin/stop-all.sh, and fixes the sbin/start-dfs.sh
and sbin/stop-dfs.sh to work with both secure and unsecure systems.)

> Update scripts to be smarter when running with privilege
> --------------------------------------------------------
>
>                 Key: HADOOP-13673
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13673
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: scripts
>    Affects Versions: 3.0.0-alpha1, 3.0.0-alpha2
>            Reporter: Allen Wittenauer
>            Assignee: Allen Wittenauer
>              Labels: security
>         Attachments: HADOOP-13673.00.patch, HADOOP-13673.01.patch, HADOOP-13673.02.patch,
HADOOP-13673.03.patch
>
>
> As work continues on HADOOP-13397, it's become evident that we need better hooks to start
daemons as specifically configured users.  Via the (command)_(subcommand)_USER environment
variables in 3.x, we actually have a standardized way to do that.  This in turn means we can
make the sbin scripts super functional with a bit of updating:
> * Consolidate start-dfs.sh and start-secure-dns.sh into one script
> * Make start-\*.sh and stop-\*.sh know how to switch users when run as root
> * Undeprecate start/stop-all.sh so that it could be used as root for production purposes
and as a single user for non-production users



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message