hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eli Collins (Commented) (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-2917) HA: haadmin should not work if run by regular user
Date Thu, 09 Feb 2012 20:08:57 GMT

    [ https://issues.apache.org/jira/browse/HDFS-2917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13204809#comment-13204809
] 

Eli Collins commented on HDFS-2917:
-----------------------------------

Thank you both for the reviews.

@Jitendra, filed HDFS-2926 as a follow on, we can do that independently, still need to do
this because we support the case where {{dfs.permissions}} is enabled but {{hadoop.security.authorization}}
is not.

@Todd, will fix the typo. The IOE message contains the wrapped exception stacktrace so you'll
get the following. IIRC that's the norm right (eg in the other clients) or did we clean that
up?

{noformat}
hdfs@eli-thinkpad:/home/eli/hadoop-0.24.0-SNAPSHOT$ ./bin/hdfs haadmin -failover nn1 nn2
12/02/09 11:55:54 ERROR ha.FailoverController: Unable to get service state for localhost/127.0.0.1:8022
org.apache.hadoop.security.AccessControlException: Access denied for user hdfs. Superuser
privilege is required
...
	at org.apache.hadoop.hdfs.tools.DFSHAAdmin.main(DFSHAAdmin.java:113)
Failover failed: Unable to get service state for localhost/127.0.0.1:8022
hdfs@eli-thinkpad:/home/eli/hadoop-0.24.0-SNAPSHOT$
{noformat}

                
> HA: haadmin should not work if run by regular user
> --------------------------------------------------
>
>                 Key: HDFS-2917
>                 URL: https://issues.apache.org/jira/browse/HDFS-2917
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: ha, name-node
>            Reporter: Aaron T. Myers
>            Assignee: Eli Collins
>             Fix For: HA branch (HDFS-1623)
>
>         Attachments: hdfs-2917.txt
>
>
> Like dfsadmin, haadmin should require HDFS superuser privileges to work. Currently any
user can use haadmin.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message