[ 
http://issues.apache.org/jira/browse/HADOOP-688?page=comments#action_12448622 ] 
            
Yoram Arnon commented on HADOOP-688:
------------------------------------

I wonder...
Since hadoop has no notion of users, security or authentication, commands that 
can be executed remotely are open to misuse.
since the format command can only be executed locally on the namenode, it's 
relatively safe - you'd need to login to that node first.
It would perhaps be better to leave safemode as a local only command too, 
except for reporting.
But then again, anyone can execute rmr /, so this point is perhaps moot.

Had we had some security in place, formatting is most logically colocated with 
the other admin commands.

> move dfs administrative interfaces to a separate command
> --------------------------------------------------------
>
>                 Key: HADOOP-688
>                 URL: http://issues.apache.org/jira/browse/HADOOP-688
>             Project: Hadoop
>          Issue Type: Improvement
>          Components: dfs
>            Reporter: dhruba borthakur
>         Assigned To: dhruba borthakur
>         Attachments: admincommand.patch
>
>
> The dfs adminsitrative commands (e.g. safemode, report, etc) should be 
> separate from the dfs user commands. The proposal is to remove the following 
> two commands:
> bin/hadoop dfs -report
> bin/hadoop dfs -safemode
> The above two features will be available through a new command:
> bin/hadoop dfsadmin -report
> bin/hadoop dfsadmin -safemode
> This is done so that there is a clean distinction between cluster 
> administrative commands and users command.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to