You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Benoy Antony (JIRA)" <ji...@apache.org> on 2013/09/17 18:05:51 UTC

[jira] [Commented] (HADOOP-9968) ProxyUsers does not work with NetGroups

    [ https://issues.apache.org/jira/browse/HADOOP-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13769631#comment-13769631 ] 

Benoy Antony commented on HADOOP-9968:
--------------------------------------

The patch also includes testcase to test the proxyuser with netgroups.
                
> ProxyUsers does not work with NetGroups
> ---------------------------------------
>
>                 Key: HADOOP-9968
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9968
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HADOOP-9968.patch
>
>
> It is possible to use NetGroups for ACLs. This requires specifying  the config property hadoop.security.group.mapping as  org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
> The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not work  if we are using NetGroups.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira