hadoop-mapreduce-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matt Davies <m...@mattdavies.net>
Subject Re: Forcing kerberos principals to lowercase
Date Mon, 09 Mar 2015 17:07:03 GMT
Sorry - I forgot to mention that I've seen the configuration with Hue, but
I want plain CLI access to work.

-Matt

On Mon, Mar 9, 2015 at 12:01 PM, Matt Davies <matt@mattdavies.net> wrote:

> Hey everyone,
>
> I have a situation where case sensitivity of principals is causing some
> pains. Here's the set up
>
> AD
> Centrify (Centrify.com)
> hadoop on RHEL
>
> The logins to the cluster are all using LDAP/PAM . When I do something
> like "id" then it returns the lowercase version of the user.  "env" return
> the upper case version
>
> for example
> id
> uid=1234(user1234)
>
> env | grep USER_PRIN
> USER_PRINCIPAL_NAME=USER1234@REALM
>
> When the user1234 tries to write to hdfs with a home directory of
> /user/user1234 I receive a permission error.  If I create it as
> /user/USER1234 then it behaves correctly.
>
> If I were to just push a file to HDFS /tmp it looks like
> -rw-r--r--    3 USER1234    hdfs     1234  2005-03-07 15:34 /tmp/file
>
> To make matters a little more complicated some usernames are mixed case so
> either upper or lower is not sufficient.  I just want to force to a lower
> case user.
>
> So, my question is  this: Is there a way to tell the kerberos setup in
> HDFS to force lowercase users (matching what linux does) so that the admins
> do not go crazy figuring out silly things like case?
>
> Thanks in advance.
>

Mime
View raw message