You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2014/05/30 01:51:02 UTC
[jira] [Commented] (HADOOP-9968) ProxyUsers does not work with
NetGroups
[ https://issues.apache.org/jira/browse/HADOOP-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14013112#comment-14013112 ]
Hudson commented on HADOOP-9968:
--------------------------------
SUCCESS: Integrated in Hadoop-trunk-Commit #5629 (See [https://builds.apache.org/job/Hadoop-trunk-Commit/5629/])
HADOOP-9968. Update CHANGES.txt in trunk. (arp: http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1598442)
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
> ProxyUsers does not work with NetGroups
> ---------------------------------------
>
> Key: HADOOP-9968
> URL: https://issues.apache.org/jira/browse/HADOOP-9968
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Reporter: Benoy Antony
> Assignee: Benoy Antony
> Fix For: 3.0.0, 2.5.0
>
> Attachments: HADOOP-9968.patch, HADOOP-9968.patch, HADOOP-9968.patch, hadoop-9968-1.2.patch
>
>
> It is possible to use NetGroups for ACLs. This requires specifying the config property hadoop.security.group.mapping as org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
> The authorization to proxy a user by another user is specified as a list of groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not work if we are using NetGroups.
--
This message was sent by Atlassian JIRA
(v6.2#6252)