You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-commits@hadoop.apache.org by br...@apache.org on 2014/08/04 23:30:42 UTC
svn commit: r1615801 -
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm
Author: brandonli
Date: Mon Aug 4 21:30:42 2014
New Revision: 1615801
URL: http://svn.apache.org/r1615801
Log:
commit the additional doc change for HDFS-6717
Modified:
hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm
Modified: hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm
URL: http://svn.apache.org/viewvc/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm?rev=1615801&r1=1615800&r2=1615801&view=diff
==============================================================================
--- hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm (original)
+++ hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm Mon Aug 4 21:30:42 2014
@@ -47,18 +47,21 @@ HDFS NFS Gateway
The NFS-gateway uses proxy user to proxy all the users accessing the NFS mounts.
In non-secure mode, the user running the gateway is the proxy user, while in secure mode the
user in Kerberos keytab is the proxy user. Suppose the proxy user is 'nfsserver'
- and users belonging to the groups 'nfs-users1'
- and 'nfs-users2' use the NFS mounts, then in core-site.xml of the NameNode, the following
+ and users belonging to the groups 'users-group1'
+ and 'users-group2' use the NFS mounts, then in core-site.xml of the NameNode, the following
two properities must be set and only NameNode needs restart after the configuration change
(NOTE: replace the string 'nfsserver' with the proxy user name in your cluster):
----
<property>
<name>hadoop.proxyuser.nfsserver.groups</name>
- <value>nfs-users1,nfs-users2</value>
+ <value>root,users-group1,users-group2</value>
<description>
- The 'nfsserver' user is allowed to proxy all members of the 'nfs-users1' and
- 'nfs-users2' groups. Set this to '*' to allow nfsserver user to proxy any group.
+ The 'nfsserver' user is allowed to proxy all members of the 'users-group1' and
+ 'users-group2' groups. Note that in most cases you will need to include the
+ group "root" because the user "root" (which usually belonges to "root" group) will
+ generally be the user that initially executes the mount on the NFS client system.
+ Set this to '*' to allow nfsserver user to proxy any group.
</description>
</property>
----