You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Konstantin Shvachko (JIRA)" <ji...@apache.org> on 2017/02/28 18:31:45 UTC
[jira] [Commented] (HADOOP-13965) Groups should be consistent in
using default group mapping class
[ https://issues.apache.org/jira/browse/HADOOP-13965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15888605#comment-15888605 ]
Konstantin Shvachko commented on HADOOP-13965:
----------------------------------------------
Hey guys, I think it would have been better to introduce a constant for the default value as with other config variables, rather than hardcoding the class name.
> Groups should be consistent in using default group mapping class
> ----------------------------------------------------------------
>
> Key: HADOOP-13965
> URL: https://issues.apache.org/jira/browse/HADOOP-13965
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 3.0.0-alpha2
> Reporter: Yiqun Lin
> Assignee: Yiqun Lin
> Priority: Minor
> Fix For: 3.0.0-alpha2
>
> Attachments: HADOOP-13965.001.patch
>
>
> {code:title=Groups.java}
> public Groups(Configuration conf, final Timer timer) {
> impl =
> ReflectionUtils.newInstance(
> conf.getClass(CommonConfigurationKeys.HADOOP_SECURITY_GROUP_MAPPING,
> ShellBasedUnixGroupsMapping.class,
> GroupMappingServiceProvider.class),
> conf);
> ...
> }
> {code}
> The default value of setting {{hadoop.security.group.mapping}} is different in code and config file. In file {{core-default.xml}}, it uses the class {{JniBasedUnixGroupsMappingWithFallback}} and this should be the true value.
> {code}
> <property>
> <name>hadoop.security.group.mapping</name>
> <value>org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback</value>
> <description>
> Class for user to group mapping (get groups for a given user) for ACL.
> The default implementation,
> org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback,
> will determine if the Java Native Interface (JNI) is available.....
> </description>
> </property>
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org