Return-Path: X-Original-To: apmail-hadoop-common-user-archive@www.apache.org Delivered-To: apmail-hadoop-common-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 6C29010A24 for ; Tue, 10 Dec 2013 14:20:21 +0000 (UTC) Received: (qmail 24108 invoked by uid 500); 10 Dec 2013 14:20:15 -0000 Delivered-To: apmail-hadoop-common-user-archive@hadoop.apache.org Received: (qmail 23855 invoked by uid 500); 10 Dec 2013 14:20:09 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 23344 invoked by uid 99); 10 Dec 2013 14:20:07 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Dec 2013 14:20:07 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of smarty.juice@gmail.com designates 209.85.214.179 as permitted sender) Received: from [209.85.214.179] (HELO mail-ob0-f179.google.com) (209.85.214.179) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Dec 2013 14:20:02 +0000 Received: by mail-ob0-f179.google.com with SMTP id wm4so5347952obc.24 for ; Tue, 10 Dec 2013 06:19:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=4qOOT+Fk1F7qf2Mu2wk8YB1IL20AXW0EJKdREdCIQz4=; b=zdCwDbs7VoF1Oad0u3y2zrLc4vkhlUE9b1/m+Jx3H2QHHzeLZ4kT+IJePBHpi0RHDY jwCCFS5QW/NnW8oaxrLrHgAnXg4uUp8NPTpgBUfElm3RfGWs9yo416WwqNtv/6Rra8az qrl3jdN/C0ZDlrx0np88R2u9+AKFDi6Nl8cN4329t5a6fvFPt7RDUDq14kXqC+wl/3Vr jywtyAPBC5v5syY3zxPbgg5OudvvJqsR/6hMQkfs/QjhdEua4mm57s2Y9ohZyCWn887U Jp/cxS5FWQcfyViP7vIjqb8yu5fCVmIDuj+q4XyclrcQfuenbdIWkgzV/PnE7PLZ2ojL pOxw== MIME-Version: 1.0 X-Received: by 10.182.199.70 with SMTP id ji6mr16844345obc.36.1386685181113; Tue, 10 Dec 2013 06:19:41 -0800 (PST) Received: by 10.182.28.165 with HTTP; Tue, 10 Dec 2013 06:19:41 -0800 (PST) In-Reply-To: References: Date: Tue, 10 Dec 2013 09:19:41 -0500 Message-ID: Subject: Re: multiusers in hadoop through LDAP From: Hardik Pandya To: user@hadoop.apache.org Content-Type: multipart/alternative; boundary=e89a8ff1cbdaa2bbf604ed2ecd90 X-Virus-Checked: Checked by ClamAV on apache.org --e89a8ff1cbdaa2bbf604ed2ecd90 Content-Type: text/plain; charset=ISO-8859-1 have you looked at hadoop.security.group.mapping.ldap.* in hadoop-common/core-default.xml additional resourcemay help On Tue, Dec 10, 2013 at 3:06 AM, YouPeng Yang wrote: > Hi > > In my cluster ,I want to have multiusers for different purpose.The usual > method is to add a user through the OS on Hadoop NameNode . > I notice the hadoop also support to LDAP, could I add user through LDAP > instead through OS? So that if a user is authenticated by the LDAP ,who > will also access the HDFS directory? > > > Regards > --e89a8ff1cbdaa2bbf604ed2ecd90 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable

have you looked at hadoop.security.group.mapping.= ldap.* in=A0 hadoop-common/core-default.xml =

additional resource= may help





On Tue, Dec 10, 2013 at 3:06 AM, YouPeng Yan= g <yypvsxf19870706@gmail.com> wrote:
Hi
=A0
=A0 In my cluster ,I wa= nt to have multiusers for different purpose.The usual method is to add a us= er through the OS=A0 on=A0 Hadoop NameNode .
=A0 I notice the hado= op also support to LDAP, could I add user through LDAP instead through OS? = So that if a user is authenticated by the LDAP ,who will also access the HD= FS directory?


Regards

--e89a8ff1cbdaa2bbf604ed2ecd90--