https://community.cloudera.com/t5/Archives-of-Support-Questions/HDFS-user-group-mapping-with-AD/m-p/99674#M12814 <P>There is a group mapping provider called CompositeGroupsMapping, which is capable of combining the groups returned from multiple other group mapping providers. The user's effective group memberships are then the union of all groups returned from the underlying group mapping providers. You could potentially set up CompositeGroupsMapping to combine results from AD and the local user database.</P><P>Unfortunately, I don't believe there is any step-by-step documentation available that discusses CompositeGroupsMapping. Instead, you'd need to review Apache JIRA <A href="https://issues.apache.org/jira/browse/HADOOP-8943">HADOOP-8943</A> and the attached patch to see how it works. There are also comments in core-default.xml that show example usage.</P><P><A href="https://github.com/apache/hadoop/blob/release-2.7.1/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml#L100-L190">https://github.com/apache/hadoop/blob/release-2.7.1/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml#L100-L190</A></P> Thu, 17 Dec 2015 02:18:12 GMT cnauroth 2015-12-17T02:18:12Z https://community.cloudera.com/t5/Archives-of-Support-Questions/HDFS-user-group-mapping-with-AD/m-p/99673#M12813 <P>users connect to Hive through Knox uses AD credentials...integrated HDFS with AD groups... now HDFS is not able to recognize local user groups.</P> Thu, 17 Dec 2015 01:00:20 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/HDFS-user-group-mapping-with-AD/m-p/99673#M12813 chrsvarma 2015-12-17T01:00:20Z https://community.cloudera.com/t5/Archives-of-Support-Questions/HDFS-user-group-mapping-with-AD/m-p/99674#M12814 <P>There is a group mapping provider called CompositeGroupsMapping, which is capable of combining the groups returned from multiple other group mapping providers. The user's effective group memberships are then the union of all groups returned from the underlying group mapping providers. You could potentially set up CompositeGroupsMapping to combine results from AD and the local user database.</P><P>Unfortunately, I don't believe there is any step-by-step documentation available that discusses CompositeGroupsMapping. Instead, you'd need to review Apache JIRA <A href="https://issues.apache.org/jira/browse/HADOOP-8943">HADOOP-8943</A> and the attached patch to see how it works. There are also comments in core-default.xml that show example usage.</P><P><A href="https://github.com/apache/hadoop/blob/release-2.7.1/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml#L100-L190">https://github.com/apache/hadoop/blob/release-2.7.1/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml#L100-L190</A></P> Thu, 17 Dec 2015 02:18:12 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/HDFS-user-group-mapping-with-AD/m-p/99674#M12814 cnauroth 2015-12-17T02:18:12Z