Author: todd
Date: Tue Jan 15 20:43:32 2013
New Revision: 1433624
URL: http://svn.apache.org/viewvc?rev=1433624&view=rev
Log:
HADOOP-8712. Change default hadoop.security.group.mapping to
JniBasedUnixGroupsNetgroupMappingWithFallback. Contributed by Robert Parker.
Modified:
hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/docs/src/documentation/content/xdocs/hdfs_permissions_guide.xml
Modified:
hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/docs/src/documentation/content/xdocs/hdfs_permissions_guide.xml
URL:
http://svn.apache.org/viewvc/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/docs/src/documentation/content/xdocs/hdfs_permissions_guide.xml?rev=1433624&r1=1433623&r2=1433624&view=diff
==============================================================================
---
hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/docs/src/documentation/content/xdocs/hdfs_permissions_guide.xml
(original)
+++
hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/docs/src/documentation/content/xdocs/hdfs_permissions_guide.xml
Tue Jan 15 20:43:32 2013
@@ -92,10 +92,11 @@ There is no provision within HDFS for cr
<section><title>Group Mapping</title>
<p>
-Once a username has been determined as described above, the list of groups is
determined by a <em>group mapping
-service</em>, configured by the <code>hadoop.security.group.mapping</code>
property.
-The default implementation,
<code>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</code>, will shell
out
-to the Unix <code>bash -c groups</code> command to resolve a list of groups
for a user.
+Once a username has been determined as described above, the list of groups is
+determined by a <em>group mapping service</em>, configured by the
+<code>hadoop.security.group.mapping</code> property. Refer to the
+core-default.xml for details of the <code>hadoop.security.group.mapping</code>
+implementation.
</p>
<p>
An alternate implementation, which connects directly to an LDAP server to
resolve the list of groups, is available
