[jira] Commented: (HADOOP-2229) Provide a simple login implementation

["Hairong Kuang (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-2229?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12546060 ] 

Hairong Kuang commented on HADOOP-2229:
---------------------------------------

Since HADOOP-1701 is still under debate, this issue intends to provide the minumum abstraction that needs to support file/directory permission in dfs. It defines a Writable interface called UserGroupInformation that contains user name, the names of the groups that it belongs to, and its umask.

{code}
public interface UserGroupInformation extends Writable {
  /** Get username */
  public String getUserName();
  
  /*** Get the name of the groups that the user belong to */
  public String[] getGroupNames();
  
  /** Get the default group name.  */
  public String getDefaultGroupName();

  /** Get the user's umask. */
  public short getUMask();
}
{code}

It also provides a Unix implementation of the UGI interface.  The implementation additionly provides a static method login with the following signature:
{code}  public static UnixUserGroupInformation login(Configuration conf) throws LoginException; {code}
It allows to construct a UnixUserGroupInformation object either from conf if it is contained there or from the underlying Unix system.

> Provide a simple login implementation
> -------------------------------------
>
>                 Key: HADOOP-2229
>                 URL: https://issues.apache.org/jira/browse/HADOOP-2229
>             Project: Hadoop
>          Issue Type: New Feature
>    Affects Versions: 0.15.0
>            Reporter: Tsz Wo (Nicholas), SZE
>            Assignee: Hairong Kuang
>             Fix For: 0.16.0
>
>
> Give a simple implementation of HADOOP-1701.    Hadoop clients are assumed to be started within a Unix-like network which provides user and group management.  This implementation read user information from the OS and send them to the NameNode in plaintexts through RPC (see also HADOOP-2184).  NameNode trusts all information given and uses them for permission checking.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.