Amogh Margoor has uploaded a new patch set (#2). ( http://gerrit.cloudera.org:8080/18019 )
Change subject: IMPALA-11027: Adding flag to enable support for ShellBasedUnixGroupMapping ...................................................................... IMPALA-11027: Adding flag to enable support for ShellBasedUnixGroupMapping Currently, Impala doesn't support ShellBasedUnixGroupsMapping and ShellBasedUnixGroupsNetgroupMapping to fetch Hadoop groups as they spawn a new process and run shell command to fetch group info. In Impala, this would happen for every session being created when user delegation is enabled via impala.doas.user and authorized_proxy_group_config. It can have many gotcha's like spawning many processes together in a highly concurrent setting, creation of zombie processes on abrupt crashing of impalad etc. However, not everyone in ecosystem have moved away from shell based group mapping. For instance, in cloudera distribution many components still rely on it. So we need a way to allow users to use shell based mapping instead of not allowing it altogether. This patch provides flag which would allow the support for users that are aware about the gotchas it comes with. Change-Id: I023f396a79f3aa27ad6ac80e91f527058a5a5470 --- M be/src/service/frontend.cc M be/src/util/backend-gflag-util.cc M common/thrift/BackendGflags.thrift M docs/topics/impala_delegation.xml M fe/src/main/java/org/apache/impala/service/BackendConfig.java M fe/src/main/java/org/apache/impala/service/JniFrontend.java 6 files changed, 18 insertions(+), 2 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/19/18019/2 -- To view, visit http://gerrit.cloudera.org:8080/18019 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: I023f396a79f3aa27ad6ac80e91f527058a5a5470 Gerrit-Change-Number: 18019 Gerrit-PatchSet: 2 Gerrit-Owner: Amogh Margoor <amarg...@gmail.com> Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
