[ https://issues.apache.org/jira/browse/HDFS-3001?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13223607#comment-13223607 ]
patrick white commented on HDFS-3001: ------------------------------------- Thanks for the feedback and good point, this might be the case. John was working to reproduce this but did not see the issue, we checked to confirm that i was running as a privileged user. I was, however the environment has a Kerb user translation rule in the site config's 'hadoop.security.auth_to_local' setting which remaps the running userid, this is likely the cause for the issue. Trying to get some bandwidth in order to confirm. > dfsadmin -refreshServiceAcl fails Kerb authentication with valid Kerb ticket, > other subcommands succeed > ------------------------------------------------------------------------------------------------------- > > Key: HDFS-3001 > URL: https://issues.apache.org/jira/browse/HDFS-3001 > Project: Hadoop HDFS > Issue Type: Bug > Components: hdfs client > Affects Versions: 0.23.1 > Reporter: patrick white > Assignee: John George > > With a valid hdfs kerberos ticket, the dfsadmin subcommand > '-refreshServiceAcl' still fails on Kerb authentication. Please see the > comment for more details. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira