[
https://issues.apache.org/jira/browse/HADOOP-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13899366#comment-13899366
]
Alejandro Abdelnur commented on HADOOP-9968:
--------------------------------------------
if/else should use always be within {}s even if a single statement.
Also, I don't understand why this change is necessary. Can you please explain?
What is different between the behavior of groups and netgroups.
> ProxyUsers does not work with NetGroups
> ---------------------------------------
>
> Key: HADOOP-9968
> URL: https://issues.apache.org/jira/browse/HADOOP-9968
> Project: Hadoop Common
> Issue Type: Improvement
> Reporter: Benoy Antony
> Assignee: Benoy Antony
> Attachments: HADOOP-9968.patch, HADOOP-9968.patch,
> hadoop-9968-1.2.patch
>
>
> It is possible to use NetGroups for ACLs. This requires specifying the
> config property hadoop.security.group.mapping as
> org.apache.hadoop.security.JniBasedUnixGroupsNetgroupMapping or
> org.apache.hadoop.security.ShellBasedUnixGroupsNetgroupMapping.
> The authorization to proxy a user by another user is specified as a list of
> groups hadoop.proxyuser.<user-name>.groups. The Group resolution does not
> work if we are using NetGroups.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
