Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hadoop.apache.org
Received-SPF: pass (athena.apache.org: domain of justin.woody@gmail.com
 designates 209.85.214.176 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CABGo67WLXxkqEQg+739RgoS_k-UzNBAO0aELenTdhyknNwPyEw@mail.gmail.com>
References: <5023A53D.2020107@ccri.com>
	<CABGo67WLXxkqEQg+739RgoS_k-UzNBAO0aELenTdhyknNwPyEw@mail.gmail.com>
Date: Thu, 9 Aug 2012 13:52:18 -0400
Message-ID: 
 <CABGo67WGfPgw=9qq7Z_abxo4Y5s0RdTEZ5juY6ZAxiodkVnPgQ@mail.gmail.com>
Subject: Re: HDFS group permissions
From: Justin Woody <justin.woody@gmail.com>
To: user@hadoop.apache.org
Content-Type: text/plain; charset=ISO-8859-1

All,

Just to close the thread, the problem was that the user and group were
not present on the name node which is why the ACE was thrown. Once he
added them to the NN, everything was good.

Cheers,
Justin

On Thu, Aug 9, 2012 at 8:00 AM, Justin Woody <justin.woody@gmail.com> wrote:
> John,
>
> Hadoop group permissions follow the BSD model, which is outlined in
> the documentation. I think your settings are correct on that
> directory, but you may want to check the higher level directories as
> well (/path, /path/to, etc).
>
> Hope that helps.
> Justin
>
> On Thu, Aug 9, 2012 at 7:55 AM, John Armstrong <jrja@ccri.com> wrote:
>> I'm having some trouble with permissions on HDFS.  I'm trying to create a
>> file in a directory where the user belongs to a group that has write
>> permissions, but it doesn't seem to be working.
>>
>> First, the directory:
>>
>> myuser$ hadoop fs -ls /path/to/parent/
>> drwxrwxr-x   - hdfs myhdfsgroup          0 2012-08-09 07:34
>> /path/to/parent/directory
>>
>> so mygroup has all permissions on /path/to/parent/directory.  Next I check:
>>
>> myuser$ groups
>> myuser [...] myhdfsgroup
>>
>> so myuser is a member of myhdfsgroup.  I should be able to put a file into
>> this directory, no?
>>
>> myuser$ hadoop fs -put testFile.txt /path/to/parent/directory/testfile.txt
>> put: org.apache.hadoop.security.AccessControlException: Permission denied:
>> user=myuser, access=WRITE, inode="directory":hdfs:myhdfsgroup:rwxrwxr-x
>>
>> I don't even see a mention of the group in this exception message.  Do group
>> permissions just not work?  And if not, why are they included in the
>> documentation?
>>
>> In case it matters, I'm using Hadoop 0.20.2 plus some patches.
>>
>> tia