[ 
https://issues.apache.org/jira/browse/HADOOP-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13909561#comment-13909561
 ] 

Hudson commented on HADOOP-9968:
--------------------------------

SUCCESS: Integrated in Hadoop-trunk-Commit #5213 (See 
[https://builds.apache.org/job/Hadoop-trunk-Commit/5213/])
HADOOP-9968. Makes ProxyUsers to work with NetGroups. Contributed by Benoy 
Antony. (ddas: 
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1570934)
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* 
/hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/authorize/ProxyUsers.java
* 
/hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/authorize/TestProxyUsers.java


> ProxyUsers does not work with NetGroups
> ---------------------------------------
>
>                 Key: HADOOP-9968
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9968
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>             Fix For: 2.5.0
>
>         Attachments: HADOOP-9968.patch, HADOOP-9968.patch, HADOOP-9968.patch, 
> hadoop-9968-1.2.patch
>
>
> It is possible to use NetGroups for ACLs. This requires specifying  the 
> config property hadoop.security.group.mapping as  
> org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or 
> org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
> The authorization to proxy a user by another user is specified as a list of 
> groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not 
> work  if we are using NetGroups.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to