Chris Nauroth created HADOOP-11321:
--------------------------------------

             Summary: copyToLocal cannot save a file to an SMB share unless the 
user has Full Control permissions.
                 Key: HADOOP-11321
                 URL: https://issues.apache.org/jira/browse/HADOOP-11321
             Project: Hadoop Common
          Issue Type: Bug
          Components: fs
    Affects Versions: 2.6.0
            Reporter: Chris Nauroth
            Assignee: Chris Nauroth


In Hadoop 2, it is impossible to use {{copyToLocal}} to copy a file from HDFS 
to a destination on an SMB share.  This is because in Hadoop 2, the 
{{copyToLocal}} maps to 2 underlying {{RawLocalFileSystem}} operations: 
{{create}} and {{setPermission}}.  On an SMB share, the user may be authorized 
for the {{create}} but denied for the {{setPermission}}.  Windows denies the 
{{WRITE_DAC}} right required by {{setPermission}} unless the user has Full 
Control permissions.  Granting Full Control isn't feasible for most 
deployments, because it's insecure.  This is a regression from Hadoop 1, where 
{{copyToLocal}} only did a {{create}} and didn't do a separate 
{{setPermission}}.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to