Of course, that brings up the question what is the relationship between Linux
groups and users and HDFS groups and users and how LDAP, or other
authentication mechanisms reconcile those sets of users, especially if they
differ across the nodes? Interesting challenge.
Rohit
-------- Original message --------
From: Rohit <[email protected]>
Date: 08/14/2016 12:23 AM (GMT-05:00)
To: Steve Varnau <[email protected]>
Cc: dev <[email protected]>
Subject: RE: Trafodion User and Group id (installation)
I thought there was some mention of HDFS. Sorry, misunderstood!
Rohit
-------- Original message --------
From: Steve Varnau <[email protected]>
Date: 08/14/2016 12:16 AM (GMT-05:00)
To: Rohit Jain <[email protected]>
Cc: dev <[email protected]>
Subject: RE: Trafodion User and Group id (installation)
Those would be database users, not unix users, right? So different mechanism.
-Steve (from mobile)
On Aug 13, 2016 10:04 PM, "Rohit" <[email protected]> wrote:
So how would Grant / Revoke authorization on objects that span across nodes be
enforced by Hive or Trafodion, for example?
Rohit
-------- Original message --------
From: Steve Varnau <[email protected]>
Date: 08/13/2016 11:09 PM (GMT-05:00)
To: [email protected]
Subject: RE: Trafodion User and Group id (installation)
Amanda,
I thought someone with a bit more HDFS expertise might answer this, but I'll
take a shot.
As long as the file storage/permission checks happen locally, I don't think
there is any problem with the users' IDs being different across a cluster.
This is not true for something like NFS where multiple systems are sharing
same filesystem.
So question is how HDFS handles it. According to [1], the owner/group are
stored as strings, not numeric IDs. And permission checks happen on the
namenode. So I think it is not necessary for the numeric user IDs to be in
synch across a cluster.
[1]
https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html
--Steve
> -----Original Message-----
> From: Amanda Moran [mailto:[email protected]]
> Sent: Friday, August 12, 2016 12:08 PM
> To: dev <[email protected]>
> Subject: Trafodion User and Group id (installation)
>
> Hi there All-
>
> Does the group id and user id need to be the same on all nodes?
>
> I tested with them being different on each node, and I don't see any
> issues.
> Example:
> node-2: trafodion:x:509:488::/home/trafodion:/bin/bash
> node-1: trafodion:x:503:503::/home/trafodion:/bin/bash
>
>
> Seems to work great. Is there something I don't know about?
>
> Thanks!
>
> --
> Thanks,
>
> Amanda Moran
