[jira] [Commented] (HADOOP-8457) Address file ownership issue for users in Administrators group on Windows.

["Ivan Mitic (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-8457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13401870#comment-13401870 ] 

Ivan Mitic commented on HADOOP-8457:
------------------------------------

DiskChecker.java/SecureIOUtils.java: Enabling Hadoop permission checks on Windows.

FileStatus.java/RawLocalFileSystem.java: By default, Windows Server 2003+ sets Administrators group as owner of newly created files/folders if the current user was a member of the Admin group. Please take a look at http://support.microsoft.com/kb/318825 for more information. Given that some places in Hadoop code assert that whoever created the file must be the owner, making appropriate code changes to account for this platform difference. In the current model, the user ownership check is abstracted away to allow us to handle this OS specific behavior.

JobTracker.java/JobSumitssionFiles.java: No need to explicitly set the ownership anymore (undoing the prior change).

MiniDFSCluster.java/UpgrateUtilities.java: Default permissions on Windows are "700" while the code expects them to be "755". Changing test code to not have expectations on default local FS permissions, but to set the corresponding permissions explicitly.

TestDFSShell.java: Enabling previously disabled test on Windows.

This Jira is also dependent on the fix for HADOOP-6527, otherwise, a test that creates a test user will remove all group mappings for the real user and cause all subsequent checks for Admin group membership to fail. Patch for HADOOP-6527 is also available.

                
> Address file ownership issue for users in Administrators group on Windows.
> --------------------------------------------------------------------------
>
>                 Key: HADOOP-8457
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8457
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: native
>    Affects Versions: 1.1.0, 0.24.0
>            Reporter: Chuan Liu
>            Assignee: Ivan Mitic
>            Priority: Minor
>         Attachments: HADOOP-8457-branch-1-win_Admins.patch
>
>
> On Linux, the initial file owners are the creators. (I think this is true in general. If there are exceptions, please let me know.) On Windows, the file created by a user in the Administrators group has the initial owner ‘Administrators’, i.e. the the Administrators group is the initial owner of the file. As a result, this leads to an exception when we check file ownership in SecureIOUtils .checkStat() method. As a result, this method is disabled right now. We need to address this problem and enable the method on Windows.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira