hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Arpit Agarwal (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-5899) Add configuration flag to disable/enable support for ACLs.
Date Sat, 08 Feb 2014 01:45:19 GMT

    [ https://issues.apache.org/jira/browse/HDFS-5899?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13895355#comment-13895355
] 

Arpit Agarwal commented on HDFS-5899:
-------------------------------------

Hi Chris,
{quote}
When ACLs are disabled, ... an fsimage containing an ACL will cause the NameNode to abort
during startup, and ACLs present in the edit log will cause the NameNode to abort. If ACLs
accidentally crept into the fsimage or edits (i.e. accidentally started with ACLs enabled,
but now the admin wants to switch them off), then the recovery procedure would be to restart
with ACLs enabled, remove all ACLs, save a new checkpoint, and then restart with ACLs disabled.
{quote}
Does it make sense to capture this briefly in the description of {{dfs.namenode.acls.enabled}}?
+1 other than this question.

Config setting checks while processing specific {{FSEditLogOpCodes}} look somewhat fragile
but I have no better suggestion.

{{TestAclConfigFlag}} is a model test!

> Add configuration flag to disable/enable support for ACLs.
> ----------------------------------------------------------
>
>                 Key: HDFS-5899
>                 URL: https://issues.apache.org/jira/browse/HDFS-5899
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: namenode
>    Affects Versions: HDFS ACLs (HDFS-4685)
>            Reporter: Chris Nauroth
>            Assignee: Chris Nauroth
>         Attachments: HDFS-5899.1.patch
>
>
> Add a new configuration property that allows administrators to toggle support for HDFS
ACLs on/off.  By default, the flag will be off.  This is a conservative choice, and administrators
interested in using ACLs can enable it explicitly.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Mime
View raw message