Hao Hao has posted comments on this change. ( http://gerrit.cloudera.org:8080/15074 )
Change subject: [java] KUDU-2972: add Kudu Ranger plugin ...................................................................... Patch Set 9: (1 comment) > Patch Set 9: > > (1 comment) http://gerrit.cloudera.org:8080/#/c/15074/4/java/kudu-ranger/src/main/java/org/apache/kudu/ranger/authorization/RangerKuduAuthorizer.java File java/kudu-ranger/src/main/java/org/apache/kudu/ranger/authorization/RangerKuduAuthorizer.java: http://gerrit.cloudera.org:8080/#/c/15074/4/java/kudu-ranger/src/main/java/org/apache/kudu/ranger/authorization/RangerKuduAuthorizer.java@126 PS4, Line 126: resource.setValue(RANGER_DB_RESOURCE_NAME, db); : resource.setValue(RANGER_TABLE_RESOURCE_NAME, table); : resource.setValue(RANGER_COLUMN_RESOUR > > I think it is up to the setting of the cluster, it can be any of the avai This is configured via hadoop.security.group.mapping property in HDFS. Sorry for the confusion, I meant to see this is not a requirement for Kudu to config this property, but you are right, if user wants to use Kudu/Ranger feature, it is required for the Kudu master node to have this config set in HDFS. So we are kind of building a 'soft' dependency on top of HDFS. Given we are in general not requiring such dependency, I am thinking to fall back to not include group information if hadoop user group mapping is not available? -- To view, visit http://gerrit.cloudera.org:8080/15074 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I0c995ac1a48ebf57667231cd3a82d3794f6ddf8d Gerrit-Change-Number: 15074 Gerrit-PatchSet: 9 Gerrit-Owner: Hao Hao <[email protected]> Gerrit-Reviewer: Adar Dembo <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Hao Hao <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Comment-Date: Thu, 20 Feb 2020 20:45:23 +0000 Gerrit-HasComments: Yes
