[jira] Commented: (HADOOP-4656) Add a user to groups mapping service

["Arun C Murthy (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-4656?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12661882#action_12661882 ] 

Arun C Murthy commented on HADOOP-4656:
---------------------------------------

I propose a new abstract class Groups with a single method 'getGroups' as below:

{code:title=Groups.java}
public abstract class Groups {
  List<String> getGroups(String username);
}
{code}

with a concrete implementation which gets the unix groups for the given user.


> Add a user to groups mapping service 
> -------------------------------------
>
>                 Key: HADOOP-4656
>                 URL: https://issues.apache.org/jira/browse/HADOOP-4656
>             Project: Hadoop Core
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.19.0
>            Reporter: Arun C Murthy
>            Assignee: Arun C Murthy
>
> Currently the IPC client sends the UGI which contains the user/group information for the Server. However this represents the groups for the user on the client-end. The more pertinent mapping from user to groups is actually the one seen by the Server. Hence the client should only send the user and we should add a 'group mapping service' so that the Server can query it for the mapping.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.