[
https://issues.apache.org/jira/browse/HDFS-14620?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16875979#comment-16875979
]
luhuachao commented on HDFS-14620:
----------------------------------
[~ayushtkn] Is the test below is suitable?
{code:java}
@Test
public void testNameserviceManagerWithDefaultRules() throws Exception {
final String username = RouterAdminServer.getSuperUser() + "@Example.com";
UserGroupInformation user =
UserGroupInformation.createRemoteUser(username);
user.doAs(new PrivilegedExceptionAction<Void>() {
@Override
public Void run() throws Exception {
RouterClient client = routerContext.getAdminClient();
NameserviceManager nameservices = client.getNameserviceManager();
DisableNameserviceRequest disableReq =
DisableNameserviceRequest.newInstance("ns0");
try {
DisableNameserviceResponse disableResp =
nameservices.disableNameservice(disableReq);
assertTrue(disableResp.getStatus());
} catch (IOException ioe) {
fail(username + " is not a super user");
}
return null;
}
});
}
{code}
> RBF: when Disable namespace in kerberos with superuser's principal, ERROR
> appear 'not a super user'
> ----------------------------------------------------------------------------------------------------
>
> Key: HDFS-14620
> URL: https://issues.apache.org/jira/browse/HDFS-14620
> Project: Hadoop HDFS
> Issue Type: Bug
> Affects Versions: 3.30
> Reporter: luhuachao
> Priority: Major
> Attachments: HDFS-14620-HDFS-13891-01.patch
>
>
> use superuser hdfs's principal hdfs-test@EXAMPLE cannot disable namespace
> with error info below, as the code judge the principal not equals to hdfs,
> also hdfs is not belong to supergroup.
> {code:java}
> [hdfs@host1 ~]$ hdfs dfsrouteradmin -nameservice disable ns2 nameservice:
> hdfs-test@EXAMPLE is not a super user at
> org.apache.hadoop.hdfs.server.federation.router.RouterPermissionChecker.checkSuperuserPrivilege(RouterPermissionChecker.java:136)
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
