You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-dev@hadoop.apache.org by "Wei-Chiu Chuang (Jira)" <ji...@apache.org> on 2020/02/27 16:03:00 UTC

[jira] [Resolved] (HDFS-14668) Support Fuse with Users from multiple Security Realms

     [ https://issues.apache.org/jira/browse/HDFS-14668?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wei-Chiu Chuang resolved HDFS-14668.
------------------------------------
    Fix Version/s: 3.2.2
                   3.1.4
                   3.3.0
       Resolution: Fixed

Thanks [~pifta]!

> Support Fuse with Users from multiple Security Realms
> -----------------------------------------------------
>
>                 Key: HDFS-14668
>                 URL: https://issues.apache.org/jira/browse/HDFS-14668
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: fuse-dfs
>    Affects Versions: 3.1.0, 3.0.3
>            Reporter: Sailesh Patel
>            Assignee: Istvan Fajth
>            Priority: Critical
>              Labels: regression
>             Fix For: 3.3.0, 3.1.4, 3.2.2
>
>
> UPDATE:
> See [this|https://issues.apache.org/jira/browse/HDFS-14668?focusedCommentId=16979466&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-16979466] comment for the complete description of what is happening here.
> Users from non-default  krb5 domain can't use hadoop-fuse.
> There are 2 Realms with kdc. 
>     -one realm is for human users  (USERS.COM.US) 
>     -the other is for service principals.   (SERVICE.COM.US) 
> Cross realm trust is setup.
> In krb5.conf  the default domain  is set to SERVICE.COM.US
> Users within USERS.COM.US Realm are not able to put any files to Fuse mounted location
> The client shows:
>       cp: cannot create regular file ‘/hdfs_mount/tmp/hello_from_fuse.txt’: Input/output error



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org