[jira] [Commented] (HADOOP-10087) UserGroupInformation.getGroupNames() fails to return primary group first when JniBasedUnixGroupsMappingWithFallback is used

["Yu Gao (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-10087?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13817624#comment-13817624 ] 

Yu Gao commented on HADOOP-10087:
---------------------------------

I have a user hdadmin on my machine, with hdadmin as its primary group and shadow as its supplementary group. The API UserGroupInformation.getGroupNames() should return hdadmin group first since it's primary, but I got following different result when I ran org.apache.hadoop.security.UserGroupInformation.main():
Getting UGI for current user
13/10/30 15:22:23 DEBUG security.Groups:  Creating new Groups object
13/10/30 15:22:23 DEBUG util.NativeCodeLoader: Trying to load the custom-built native-hadoop library...
13/10/30 15:22:23 DEBUG util.NativeCodeLoader: Loaded the native-hadoop library
13/10/30 15:22:23 DEBUG security.JniBasedUnixGroupsMapping: Using JniBasedUnixGroupsMapping for Group resolution
13/10/30 15:22:23 DEBUG security.JniBasedUnixGroupsMappingWithFallback: Group mapping impl=org.apache.hadoop.security.JniBasedUnixGroupsMapping
13/10/30 15:22:24 DEBUG security.Groups: Group mapping impl=org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback; cacheTimeout=300000
13/10/30 15:22:24 DEBUG security.UserGroupInformation: hadoop login
13/10/30 15:22:24 DEBUG security.UserGroupInformation: hadoop login commit
13/10/30 15:22:24 DEBUG security.UserGroupInformation: using local user:UsernamePrincipal: hdadmin
13/10/30 15:22:24 DEBUG security.UserGroupInformation: UGI loginUser:hdadmin (auth:SIMPLE)
User: hdadmin
Group Ids:
13/10/30 15:22:24 DEBUG security.Groups: Returning fetched groups for 'hdadmin'
Groups: shadow hdadmin
UGI: hdadmin (auth:SIMPLE)
Auth method SIMPLE
Keytab false

> UserGroupInformation.getGroupNames() fails to return primary group first when JniBasedUnixGroupsMappingWithFallback is used
> ---------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10087
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10087
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.1.0-beta, 2.2.0
>         Environment: SUSE Linux Enterprise Server 11 (x86_64)
>            Reporter: Yu Gao
>              Labels: security
>
> When JniBasedUnixGroupsMappingWithFallback is used as the group mapping resolution provider, UserGroupInformation.getGroupNames() fails to return the primary group first in the list as documented.



--
This message was sent by Atlassian JIRA
(v6.1#6144)