Amogh Margoor has uploaded this change for review. ( http://gerrit.cloudera.org:8080/18019
Change subject: [DONOT MERGE] Adding flag to enable support for ShellBasedUnixGroupMapping ...................................................................... [DONOT MERGE] Adding flag to enable support for ShellBasedUnixGroupMapping Currently, Impala doesn't support ShellBasedUnixGroupsMapping and ShellBasedUnixGroupsNetgroupMapping to fetch Hadoop groups as they spawn a new process and run shell command to fetch group info. In Impala, this would happen for every session being created when user delegation is enabled via impala.doas.user and authorized_proxy_group_config. It can have many gotcha's like spawning many processes together in a highly concurrent setting, creation of zombie processes on abrupt crashing of impalad etc. However, not everyone in ecosystem have moved away from shell based group mapping. For instance, in cloudera distribution many components still rely on it. As we spawn process only for doAsUser and not for every user there are good chances that we may not run into various gotcha's due to caching of group info and not many concurrent sessions. So we need a way to allow users to use shell based mapping instead of not allowing it altogether. This patch provides flag which would allow the support for users that are aware about the gotchas it comes with. Change-Id: I023f396a79f3aa27ad6ac80e91f527058a5a5470 --- M be/src/service/frontend.cc M common/thrift/BackendGflags.thrift M docs/topics/impala_delegation.xml M fe/src/main/java/org/apache/impala/service/BackendConfig.java M fe/src/main/java/org/apache/impala/service/JniFrontend.java 5 files changed, 15 insertions(+), 2 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/19/18019/1 -- To view, visit http://gerrit.cloudera.org:8080/18019 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I023f396a79f3aa27ad6ac80e91f527058a5a5470 Gerrit-Change-Number: 18019 Gerrit-PatchSet: 1 Gerrit-Owner: Amogh Margoor <amarg...@gmail.com>
