[ https://issues.apache.org/jira/browse/HDFS-1012?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Srikanth Sundarrajan updated HDFS-1012: --------------------------------------- Attachment: HDFS-1012.patch HDFS-1012-bp-y20s.patch HDFS-1012-bp-y20.patch >> Uploading patch for Ramesh It should be possible with this patch to fully qualify the documentLocation attorbute in ldap to include the cluster name (fs.default.name). If the documentLocation in ldap is fully qualified, the access is restricted by the proxy to that specific cluster, If the documentLocation is not qualified, then access is not restricted to a cluster. Backport patches: HDFS-1012-bp-y20.patch & HDFS-1012-bp-y20s.patch are not for commit. > documentLocation attribute in LdapEntry for HDFSProxy isn't specific to a > cluster > --------------------------------------------------------------------------------- > > Key: HDFS-1012 > URL: https://issues.apache.org/jira/browse/HDFS-1012 > Project: Hadoop HDFS > Issue Type: Improvement > Components: contrib/hdfsproxy > Affects Versions: 0.20.1, 0.20.2, 0.21.0, 0.22.0 > Reporter: Srikanth Sundarrajan > Assignee: Ramesh Sekaran > Fix For: 0.20.1, 0.22.0 > > Attachments: HDFS-1012-bp-y20.patch, HDFS-1012-bp-y20s.patch, > HDFS-1012.patch > > > List of allowed document locations accessible through HDFSProxy isn't > specific to a cluster. LDAP entries can include the name of the cluster to > which the path belongs to have better control on which clusters/paths are > accessible through HDFSProxy by the user. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.