I believe what you want is secure impersonation which means that the
superuser (the user that started the name node) can submit jobs on behalf
of another user. For this, you have to set up in core-site.xml:

<property>
      <name>hadoop.proxyuser.superusername.groups</name>

      <value>group1,group2</value>
      <description>Allow the superuser superusername to impersonate
any members of the group group1 and group2</description>
</property>
<property>
      <name>hadoop.proxyuser.superusername.hosts</name>
       <value>host1,host2</value>
       <description>The superuser can connect only from host1 and
host2 to impersonate a user</description>
</property>

You can find detailed information here:
http://hadoop.apache.org/common/docs/r1.0.1/Secure_Impersonation.html and a
nice overview of Hadoop's security here:
http://www.slideshare.net/ydn/1-hadoop-securityindetailshadoopsummit2010

All the best,
Rozemary

On 27 March 2012 17:48, Deniz Demir <denizde...@me.com> wrote:

> I am trying to submit a job under a different username. I assumed
> mapreduce.job.user.name property is for this, and I have tried to set it
> in mapred-site.xml file but it doesn't seem to work. Any idea on what I
> should do?
>
> Thanks,
> Deniz
>

Reply via email to