[
https://issues.apache.org/jira/browse/HDFS-2917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13204809#comment-13204809
]
Eli Collins commented on HDFS-2917:
-----------------------------------
Thank you both for the reviews.
@Jitendra, filed HDFS-2926 as a follow on, we can do that independently, still
need to do this because we support the case where {{dfs.permissions}} is
enabled but {{hadoop.security.authorization}} is not.
@Todd, will fix the typo. The IOE message contains the wrapped exception
stacktrace so you'll get the following. IIRC that's the norm right (eg in the
other clients) or did we clean that up?
{noformat}
hdfs@eli-thinkpad:/home/eli/hadoop-0.24.0-SNAPSHOT$ ./bin/hdfs haadmin
-failover nn1 nn2
12/02/09 11:55:54 ERROR ha.FailoverController: Unable to get service state for
localhost/127.0.0.1:8022
org.apache.hadoop.security.AccessControlException: Access denied for user hdfs.
Superuser privilege is required
...
at org.apache.hadoop.hdfs.tools.DFSHAAdmin.main(DFSHAAdmin.java:113)
Failover failed: Unable to get service state for localhost/127.0.0.1:8022
hdfs@eli-thinkpad:/home/eli/hadoop-0.24.0-SNAPSHOT$
{noformat}
> HA: haadmin should not work if run by regular user
> --------------------------------------------------
>
> Key: HDFS-2917
> URL: https://issues.apache.org/jira/browse/HDFS-2917
> Project: Hadoop HDFS
> Issue Type: Sub-task
> Components: ha, name-node
> Reporter: Aaron T. Myers
> Assignee: Eli Collins
> Fix For: HA branch (HDFS-1623)
>
> Attachments: hdfs-2917.txt
>
>
> Like dfsadmin, haadmin should require HDFS superuser privileges to work.
> Currently any user can use haadmin.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
