[jira] [Created] (HADOOP-13832) Implement a file-based GroupMappingServiceProvider

["Gary Helmling (JIRA)" <ji...@apache.org>]

Gary Helmling created HADOOP-13832:
--------------------------------------

             Summary: Implement a file-based GroupMappingServiceProvider
                 Key: HADOOP-13832
                 URL: https://issues.apache.org/jira/browse/HADOOP-13832
             Project: Hadoop Common
          Issue Type: New Feature
          Components: security
            Reporter: Gary Helmling


In can be useful to decouple Hadoop group membership resolution from OS-level group memberships, without having to depend on an external system like LDAP.

I'd like to propose a file-based group mapping implementation, which will read group membership information from a configured file path on the local filesystem, reloading periodically for changes.  For simplicity, it will use the same file format as /etc/group.

I'm aware of the option for static mappings in core-site.xml, but maintaining these in an xml file is cumbersome and these are not reloadable.  Having a built-in file-based implementation will also make this more usable in other systems relying on Hadoop security tooling, such as HBase.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-dev-help@hadoop.apache.org