hadoop-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Wellington Chevreuil <wellington.chevre...@gmail.com>
Subject Re: HDFS group permissions
Date Thu, 09 Aug 2012 13:48:04 GMT
Hi John,

Have you tried set this myhdfsgroup group in
dfs.permissions.superusergroup property? If you set this property in
your hdfs-site.xml file, this group will be a super user group, and
should have full permissions in any HDFS place.

Ex:

<property>
         <name>dfs.permissions.superusergroup</name>
         <value>myhdfsgroup</value>
    </property>

Regards,
Wellington.

2012/8/9 Justin Woody <justin.woody@gmail.com>:
> John,
>
> Hadoop group permissions follow the BSD model, which is outlined in
> the documentation. I think your settings are correct on that
> directory, but you may want to check the higher level directories as
> well (/path, /path/to, etc).
>
> Hope that helps.
> Justin
>
> On Thu, Aug 9, 2012 at 7:55 AM, John Armstrong <jrja@ccri.com> wrote:
>> I'm having some trouble with permissions on HDFS.  I'm trying to create a
>> file in a directory where the user belongs to a group that has write
>> permissions, but it doesn't seem to be working.
>>
>> First, the directory:
>>
>> myuser$ hadoop fs -ls /path/to/parent/
>> drwxrwxr-x   - hdfs myhdfsgroup          0 2012-08-09 07:34
>> /path/to/parent/directory
>>
>> so mygroup has all permissions on /path/to/parent/directory.  Next I check:
>>
>> myuser$ groups
>> myuser [...] myhdfsgroup
>>
>> so myuser is a member of myhdfsgroup.  I should be able to put a file into
>> this directory, no?
>>
>> myuser$ hadoop fs -put testFile.txt /path/to/parent/directory/testfile.txt
>> put: org.apache.hadoop.security.AccessControlException: Permission denied:
>> user=myuser, access=WRITE, inode="directory":hdfs:myhdfsgroup:rwxrwxr-x
>>
>> I don't even see a mention of the group in this exception message.  Do group
>> permissions just not work?  And if not, why are they included in the
>> documentation?
>>
>> In case it matters, I'm using Hadoop 0.20.2 plus some patches.
>>
>> tia

Mime
View raw message