multiusers in hadoop through LDAP

Question

In my cluster ,I want to have multiusers for different purpose. The usual method is to add a user through the OS on Hadoop NameNode.

I notice the hadoop also support to LDAP, could I add user through LDAP instead through OS? So that if a user is authenticated by the LDAP ,who will also access the HDFS directory?

Comments

have you looked at hadoop.security.group.mapping.ldap.* in  hadoop-common/core-default.xml
additional resource may help

Answer 1

Please have a look at hadoop.security.group.mapping.ldap.* settings as per Garima's suggestion.

In advance, just want to share our story related to LDAP + hadoop.security.group.mapping.ldap.*, if you run into the same limitation as we did:

In many cases hadoop.security.group.mapping.ldap.* should solve your problem. Unfortunately, they did now work for us. The problematic setting relates to an additional filter to use when searching for LDAP groups. We wanted to use posixGroups filter, but it is currently not supported by Hadoop. Finally, we found a workaround using name service switch configuration where we specified that the LDAP should the primary source of information about groups of our users. This means that we solved this problem on the operating system level, not on Hadoop level.

Check the following link http://www.slideshare.net/AdamKawa/hadoop-adventures-at-spotify-strata-conference-hadoop-world-2013 (slides 18-26) should be helpful.