hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aaron T. Myers (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (MAPREDUCE-2473) MR portion of HADOOP-7214 - Hadoop /usr/bin/groups equivalent
Date Thu, 05 May 2011 05:17:03 GMT

    [ https://issues.apache.org/jira/browse/MAPREDUCE-2473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13029129#comment-13029129

Aaron T. Myers commented on MAPREDUCE-2473:

It seems unfortunate that we're lumping in the "getGroups" API (an action intended for non-admin
usage) with the refresh methods (admin actions). Unfortunately the ACLs for this whole Protocol
are determined by "security.refresh.user.mappings.protocol.acl" which is a misnomer when it
also affects the group command.

Any thoughts on a way around this?

Certainly. We could have a separate protocol interface for refreshing versus fetching user
group mappings. It seemed logical to me to lump the two together, since they both cover user
-> group mapping, but I don't feel very strongly about this.

> MR portion of HADOOP-7214 - Hadoop /usr/bin/groups equivalent
> -------------------------------------------------------------
>                 Key: MAPREDUCE-2473
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2473
>             Project: Hadoop Map/Reduce
>          Issue Type: New Feature
>          Components: jobtracker
>    Affects Versions: 0.23.0
>            Reporter: Aaron T. Myers
>            Assignee: Aaron T. Myers
>             Fix For: 0.23.0
>         Attachments: mapreduce-2473.0.patch

This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

View raw message