[
https://issues.apache.org/jira/browse/HADOOP-12793?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HADOOP-12793:
-------------------------------------
Attachment: HADOOP-12791.001.patch
Rev01: add description of various group mapping services that Hadoop current
supports: including {{LdapGroupsMapping}}, {{CompositeGroupsMapping}},
{{JniBasedUnixGroupsNetgroupMappingWithFallback}},
{{ShellBasedUnixGroupsNetgroupMapping}}.
There are other group mapping services that I don't think are intended to be
used directly, like {{JniBasedUnixGroupsNetgroupMapping}} and
{{JniBasedUnixGroupsNetgroupMapping}}, so I omitted them for clarity.
I originally intend to write a tutorial of LdapGroupMapping only, but turns out
there are so many undocumented ones that I figured I should write a short guide
to cover them all.
> Introduce undocumented group mapping implementations in HDFS Permissions Guide
> ------------------------------------------------------------------------------
>
> Key: HADOOP-12793
> URL: https://issues.apache.org/jira/browse/HADOOP-12793
> Project: Hadoop Common
> Issue Type: Improvement
> Components: documentation
> Affects Versions: 2.7.2
> Reporter: Wei-Chiu Chuang
> Assignee: Wei-Chiu Chuang
> Labels: ldap, supportability
> Attachments: HADOOP-12791.001.patch
>
>
> LdapGroupsMapping has lots of configurable properties and is thus fairly
> complex in nature. _HDFS Permissions Guide_ has a minimal introduction to
> LdapGroupsMapping, with reference to "More information on configuring the
> group mapping service is available in the Javadocs."
> However, its Javadoc provides no information about how to configure it.
> Core-default.xml has descriptions for each property, but still lacks a
> comprehensive tutorial. Without a tutorial/guide, these configurable
> properties would be buried under the sea of properties.
> Both Cloudera and HortonWorks has some information regarding LDAP group
> mapping:
> http://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_ldap_grp_mappings.html
> http://hortonworks.com/blog/hadoop-groupmapping-ldap-integration/
> But neither cover all configurable features, such as using SSL with LDAP, and
> POSIX group semantics.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
