Cloudera Hadoop Extended Acl's not working -


have been working on week now, here issue. have setup cluster cdh5 security enabled using mit kerberos. trying extended acl's , has done necessary changes responsible set doesn't work , here summary in commands.

      [root@dn01 ~]# kinit hdfs       password hdfs@vt2.hadoop.ba.ssa.gov:        [root@dn01 ~]# hdfs dfs -ls /vt2/testdata/dcus       found 2 items       -rwxr-----   3 hdfs systems       3949 2016-03-16         16:13 /vt2/testdata/dcus/xxxx.jsonseq       drwxr-----+  - hdfs systems          0 2016-03-18         15:57 /vt2/testdata/dcus/nn       [root@dn01 ~]# hdfs dfs -getfacl /vt2/testdata/dcus           # file: /vt2/testdata/dcus           # owner: hdfs           # group: systems           user::rwx           group::r--           group:developers:r--           mask::r--           other::---     [root@dn01 ~]# kdestroy     [root@dn01 ~]# kinit 419650     password 419650@vt2.hadoop.ba.ssa.gov:      [root@dn01 ~]# hdfs dfs -ls /vt2/testdata/dcus     ls: permission denied: user=419650, access=read_execute,        inode="/vt2/testdata/dcus":hdfs:systems:drwxr-----:group::r--,group:developers:r--     [root@dn01 ~]# id 419650     uid=1502(419650) gid=1504(419650) groups=1504(419650),1503(systems)     [root@dn01 ~]# kinit 815677     password 815677@vt2.hadoop.ba.ssa.gov:      [root@dn01 ~]# hdfs dfs -ls /vt2/testdata/dcus     ls: permission denied: user=815677, access=read_execute, inode="/vt2/testdata/dcus":hdfs:systems:drwxr-----:group::r--,group:developers:r--     [root@dn01 ~]# id 815677     uid=1500(815677) gid=1500(815677) groups=1500(815677),1502(developers) 

i can access directory if authenticate hdfs owner of dir otherwise not though if user member of group has access directory in question seen in "getfacl" command.


Comments

Popular posts from this blog

html - Styling progress bar with inline style -

java - Oracle Sql developer error: could not install some modules -

How to use autoclose brackets in Jupyter notebook? -