Cloudera Hadoop Extended Acl's not working -
have been working on week now, here issue. have setup cluster cdh5 security enabled using mit kerberos. trying extended acl's , has done necessary changes responsible set doesn't work , here summary in commands.
[root@dn01 ~]# kinit hdfs password hdfs@vt2.hadoop.ba.ssa.gov: [root@dn01 ~]# hdfs dfs -ls /vt2/testdata/dcus found 2 items -rwxr----- 3 hdfs systems 3949 2016-03-16 16:13 /vt2/testdata/dcus/xxxx.jsonseq drwxr-----+ - hdfs systems 0 2016-03-18 15:57 /vt2/testdata/dcus/nn [root@dn01 ~]# hdfs dfs -getfacl /vt2/testdata/dcus # file: /vt2/testdata/dcus # owner: hdfs # group: systems user::rwx group::r-- group:developers:r-- mask::r-- other::--- [root@dn01 ~]# kdestroy [root@dn01 ~]# kinit 419650 password 419650@vt2.hadoop.ba.ssa.gov: [root@dn01 ~]# hdfs dfs -ls /vt2/testdata/dcus ls: permission denied: user=419650, access=read_execute, inode="/vt2/testdata/dcus":hdfs:systems:drwxr-----:group::r--,group:developers:r-- [root@dn01 ~]# id 419650 uid=1502(419650) gid=1504(419650) groups=1504(419650),1503(systems) [root@dn01 ~]# kinit 815677 password 815677@vt2.hadoop.ba.ssa.gov: [root@dn01 ~]# hdfs dfs -ls /vt2/testdata/dcus ls: permission denied: user=815677, access=read_execute, inode="/vt2/testdata/dcus":hdfs:systems:drwxr-----:group::r--,group:developers:r-- [root@dn01 ~]# id 815677 uid=1500(815677) gid=1500(815677) groups=1500(815677),1502(developers)
i can access directory if authenticate hdfs owner of dir otherwise not though if user member of group has access directory in question seen in "getfacl" command.
Comments
Post a Comment