[jira] [Commented] (HADOOP-11004) NFS gateway doesn't respect HDFS extended ACLs

["Arpit Agarwal (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-11004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14695779#comment-14695779 ] 

Arpit Agarwal commented on HADOOP-11004:
----------------------------------------

This Jira brings up two separate issues:
# Accessing HDFS files via NFS does not respect existing ACLs. If so this needs to be fixed since we'd expect file access via NFS to respect both HDFS unix-style permissions and ACLs.
# HDFS ACLs are not exposed when listing files/directories via NFS. HDFS-6949 as [~brandonli] mentioned.

> NFS gateway doesn't respect HDFS extended ACLs
> ----------------------------------------------
>
>                 Key: HADOOP-11004
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11004
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: nfs, security
>    Affects Versions: 2.4.0
>         Environment: HDP 2.1
>            Reporter: Hari Sekhon
>
> I'm aware that the NFS gateway to HDFS doesn't work with secondary groups until Hadoop 2.5 (HADOOP-10701) but I've also found that when setting extended ACLs to allow the primary group of my regular user account I'm still unable to access that directory in HDFS via the NFS gateway's mount point, although I can via hadoop fs commands, indicating the NFS gateway isn't respecting with HDFS extended ACLs. Nor do the existence of extended ACLS show up via a plus sign after the rwx bits in the NFS directory listing as they do in hadoop fs listing or as regular Linux extended ACLs both do.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)