question Re: Namenode logs access control in Support Questions

Namenode logs access control

garunkumar85 — Sat, 30 Jan 2016 02:33:26 GMT

How to restrict access to Name node logs for a particular users/groups?

Re: Namenode logs access control

nsabharwal — Sat, 30 Jan 2016 02:35:10 GMT

@AR That will based on your POSIX access level. Chmod and Chown

Make sure users are not part of hdfs/hadoop group.

Don't let users login to Master nodes. Restrict access to edge nodes only

Re: Namenode logs access control

garunkumar85 — Sat, 30 Jan 2016 03:34:39 GMT

@Neeraj Sabharwal Thank you for your response. But what if we need to allow users to view the logs (read only) through Ambari only not even edge node access.

just this url access

http://domainame:50070/logs/

Re: Namenode logs access control

nsabharwal — Sat, 30 Jan 2016 03:39:23 GMT

@AR see this

http://hortonworks.com/blog/hadoop-groupmapping-ldap-integration/

Re: Namenode logs access control

nsabharwal — Sat, 30 Jan 2016 03:41:23 GMT

@AR

See this

Hint : it may not be exact solution

http://hortonworks.com/blog/hadoop-groupmapping-ldap-integration/

Re: Namenode logs access control

ArpitAgarwal — Sat, 30 Jan 2016 04:29:27 GMT

Hi @AR, the '/logs' servlet is admin-only. There is no way to expose it to non-privileged users.

HDFS administrators are configured via dfs.cluster.administrators, although you obviously don't want to add arbitrary users to this list just to get logs servlet access.