[
https://issues.apache.org/jira/browse/HADOOP-8101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13246688#comment-13246688
]
Bikas Saha commented on HADOOP-8101:
------------------------------------
bq.Problem 1: Group Mappings for HDFS. HDFS file permissions are implemented
inside HDFS - there is no interaction with the local file system in order to
implement these permissions. However, HDFS needs a user-to-group mapping.
Currently there is a pluggable module for obtaining a mapping via LDap and via
shell commands. We need a group mapping for windows.
HADOOP-8234 tracks this
bq.Problem 3: Permissions for RawLocalFileSystem when using Hadoop on a local
desktop (no HDFS is involved here). We need to emulate set-permissions and
get-permissions APIs of the class FileSystem.java when the local file system
and desktop are windows. Hadoop FileSystem permission are the same as those in
Unix.
HADOOP-8235 tracks this.
bq.Problem 2: HDFS and MR Impl Protecting its local OS resources from Tasks.
Hadoop impl uses local OS resources such as files and tasks. Hadoop protects
these resources from tasks that run on the same hosts. HDFS and MR daemons uses
local files & dirs and sets permissions when creating dirs/file and later on
checks these permissions. For example, a Datanode sets the permission of its
"block dirs" to be unreadable by others when it formats a data node. In some
cases the permissions are set using a RawLocalFileSystem's permissions. We need
a way to set such protections for windows.
HADOOP-8235 might lead to a solution to this or we may be able to do something
simpler for it
> Access Control support for Non-secure deployment of Hadoop on Windows
> ---------------------------------------------------------------------
>
> Key: HADOOP-8101
> URL: https://issues.apache.org/jira/browse/HADOOP-8101
> Project: Hadoop Common
> Issue Type: Improvement
> Components: native
> Reporter: Sanjay Radia
> Attachments: security.patch, security1.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
