You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Arpit Agarwal (JIRA)" <ji...@apache.org> on 2014/05/30 01:42:04 UTC

[jira] [Updated] (HADOOP-9968) ProxyUsers does not work with NetGroups

     [ https://issues.apache.org/jira/browse/HADOOP-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arpit Agarwal updated HADOOP-9968:
----------------------------------

    Fix Version/s: 3.0.0

Merged to branch-2 along with HADOOP-10448 via r1598440 and fixed up CHANGES.txt via r1598442.

Thanks for generating the merge patch [~benoyantony]!

> ProxyUsers does not work with NetGroups
> ---------------------------------------
>
>                 Key: HADOOP-9968
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9968
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>             Fix For: 3.0.0, 2.5.0
>
>         Attachments: HADOOP-9968.patch, HADOOP-9968.patch, HADOOP-9968.patch, hadoop-9968-1.2.patch
>
>
> It is possible to use NetGroups for ACLs. This requires specifying  the config property hadoop.security.group.mapping as  org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
> The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not work  if we are using NetGroups.



--
This message was sent by Atlassian JIRA
(v6.2#6252)