You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Brandon Li (JIRA)" <ji...@apache.org> on 2014/06/18 22:02:25 UTC

[jira] [Comment Edited] (HADOOP-10701) NFS should not validate the access premission only based on the user's primary group

    [ https://issues.apache.org/jira/browse/HADOOP-10701?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14036268#comment-14036268 ] 

Brandon Li edited comment on HADOOP-10701 at 6/18/14 8:01 PM:
--------------------------------------------------------------

Thank you, [~qwertymaniac], for the fix. The patch looks nice. What [~PKUKILLA] said makes sense too. To support the easy deployment in the Cloud, we could provide a config property to let NFS gateway ignore the GIDs in the request and do a lookup similar as those in IdUserGroup, which has a mapping cache already. 


was (Author: brandonli):
Thank you, [~qwertymaniac], for the fix. The patch looks nice. What [~PKUKILLA] said makes sense too. To support the easy deployment in the Cloud, we could provide a config property to let NFS gateway ignore the GIDs in the request and do a lookup in IdUserGroup, which has a mapping cache already. 

> NFS should not validate the access premission only based on the user's primary group
> ------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10701
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10701
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: nfs
>    Affects Versions: 2.3.0
>            Reporter: Premchandra Preetham Kukillaya
>            Assignee: Harsh J
>         Attachments: HADOOP-10701.patch, HADOOP-10701.patch, Hadoop_NFS_BugCreation_Steps.docx
>
>
> The bug is while accessing NFS Mounted File System the permission is always validated based on the primary Unix group the user is associated with and Secondary Unix groups are ignored.



--
This message was sent by Atlassian JIRA
(v6.2#6252)