[
https://issues.apache.org/jira/browse/HADOOP-6864?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Erik Steffl updated HADOOP-6864:
--------------------------------
Attachment: HADOOP-6864-0.20.1xx-1.patch
HADOOP-6864-0.20.1xx-1.patch addresses the comments in review.
Testing: since it depends on system setup it's not completely automatic, the
way I tested it I created a copy of TestAccessControlList and set it up to use
JniBasedUnixGroupsNetgroupMapping for group mapping and set up /etc/netgroup
accordingly (essentially same as what
ShellBasedUnixGroupsNetgroupMappingTestWrapper.java returns).
Note that /etc/nsswitch.conf must have line 'netgroup: files' in it for
the settings in /etc/netgroup to be used.
> Provide a JNI-based implementation of ShellBasedUnixGroupsNetgroupMapping
> (implementation of GroupMappingServiceProvider)
> -------------------------------------------------------------------------------------------------------------------------
>
> Key: HADOOP-6864
> URL: https://issues.apache.org/jira/browse/HADOOP-6864
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Reporter: Erik Steffl
> Fix For: 0.22.0
>
> Attachments: HADOOP-6864-0.20.1xx-1.patch, HADOOP-6864-0.20.1xx.patch
>
>
> The netgroups implementation of GroupMappingServiceProvider (see
> ShellBasedUnixGroupsNetgroupMapping.java) does a fork of a unix command to
> get the netgroups of a user. Since the group resolution happens in the
> servers, this might be costly. This jira aims at providing a JNI-based
> implementation for GroupMappingServiceProvider.
> Note that this is similar to what
> https://issues.apache.org/jira/browse/HADOOP-6818 does for implementation of
> GroupMappingServiceProvider that supports only unix groups.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
