Apache
/
hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HDFS-6664. HDFS permissions guide documentation states incorrect default group mapping class. (Ray Chiang via aw)

This commit is contained in:
Allen Wittenauer 2014-09-26 12:21:37 -07:00
parent 27f9edceed
commit 3c86c68078
2 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
View File

@ -717,6 +717,9 @@ Release 2.6.0 - UNRELEASED
HDFS-7140. Add a tool to list all the existing block storage policies.
(jing9)
HDFS-6664. HDFS permissions guide documentation states incorrect default
group mapping class. (Ray Chiang via aw)
Release 2.5.1 - 2014-09-05
INCOMPATIBLE CHANGES

13
hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsPermissionsGuide.apt.vm
View File

@ -99,9 +99,16 @@ HDFS Permissions Guide
Once a username has been determined as described above, the list of
groups is determined by a group mapping service, configured by the
hadoop.security.group.mapping property. The default implementation,
org.apache.hadoop.security.ShellBasedUnixGroupsMapping, will shell out
to the Unix bash -c groups command to resolve a list of groups for a
user.
org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback,
will determine if the Java Native Interface (JNI) is available. If
JNI is available, the implementation will use the API within hadoop
to resolve a list of groups for a user. If JNI is not available
then the shell implementation,
org.apache.hadoop.security.ShellBasedUnixGroupsMapping, is used.
This implementation shells out with the <<<bash -c groups>>>
command (for a Linux/Unix environment) or the <<<net group>>>
command (for a Windows environment) to resolve a list of groups for
a user.
An alternate implementation, which connects directly to an LDAP server
to resolve the list of groups, is available via