[ https://issues.apache.org/jira/browse/HDFS-10863?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15517702#comment-15517702 ]
John Zhuge commented on HDFS-10863: ----------------------------------- Hi [~jbigdata.fr], thanks for reporting the issue. You can always post any question to u...@hadoop.apache.org. Please read {{Overview}} of [HDFS Permissions Guide (2.7.3)|https://hadoop.apache.org/docs/r2.7.3/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html]: bq. When a file or directory is created, its owner is the user identity of the client process, and its group is the group of the parent directory (the BSD rule). Property {{dfs.permissions.superusergroup}} sets the super user group whose members are all considered super users. In you case, any member of group {{hadoop}} becomes HDFS super user who will bypass any permission checking. Please set it with care. > hadoop superusergroup supergroup issue > -------------------------------------- > > Key: HDFS-10863 > URL: https://issues.apache.org/jira/browse/HDFS-10863 > Project: Hadoop HDFS > Issue Type: Bug > Components: namenode > Affects Versions: 2.7.2 > Environment: $ hadoop version > Hadoop 2.7.2 > Reporter: www.jbigdata.fr > Priority: Minor > > I want to match my unix user to HDFS: hduser:hadoop. > For the user I use the VE. > $ echo $HADOOP_HDFS_USER > hduser > For the group I use the hdfs-site.xml : > <property> > <name>dfs.permissions.superusergroup</name> > <value>hadoop</value> > </property> > The namenode log file show the parameter user/group values. > INFO org.apache.hadoop.hdfs.server.namenode.FSNamesystem: fsOwner > = hduser (auth:SIMPLE) > INFO org.apache.hadoop.hdfs.server.namenode.FSNamesystem: supergroup > = hadoop > INFO org.apache.hadoop.hdfs.server.namenode.FSNamesystem: isPermissionEnabled > = true > Everything seems to be OK, but when I copy file form FS to HDFS the group is > not correct. It keeps the supergroup default value. > Thoses shell commands show the issue: > $ ll /srv/downloads/zk.tar > -rw-r--r-- 1 hduser hadoop 41984000 Aug 18 13:25 /srv/downloads/zk.tar > $ hdfs dfs -put /srv/downloads/zk.tar /tmp > $ hdfs dfs -ls /tmp/zk.tar > -rw-r--r-- 2 hduser supergroup 41984000 2016-09-14 12:47 /tmp/zk.tar > I have: > -rw-r--r-- 2 hduser supergroup 41984000 2016-09-14 12:47 /tmp/zk.tar > I expect : > -rw-r--r-- 2 hduser hadoop 41984000 2016-09-14 12:47 /tmp/zk.tar > Why the HDFS group is not the value of the dfs.permissions.superusergroup > property ? > @jbigdata.fr -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org