question Re: Hbase ACLs will apply for the subgroup members in Archives of Support Questions (Read Only)

Hbase ACLs will apply for the subgroup members?

Srini — Fri, 16 Sep 2022 10:05:44 GMT

Hi,

We are running with acl error in HBase. One of our user named "x" is part of the group called "A". And "A" is part of another group "B".

Now Group "B" have access to a table "p" in Hbase.

When user "x" is trying to access table "p", he is getting error as access denied.

I want to know whether hbase acls supports subgroup members or only direct group members only will have access?

Thanks

Srini

Re: Hbase ACLs will apply for the subgroup members

Harsh J — Thu, 25 Feb 2016 23:23:14 GMT

Unless "hdfs groups x" returns both "A" and "B" in its results,
HDFS/HBase/etc. would not be aware of such a relationship.

If you use SSSD+LDAP to resolve groups for your OS, you can request it to
query a certain level of nesting. See ldap_group_nesting_level under
http://linux.die.net/man/5/sssd-ldap.

Re: Hbase ACLs will apply for the subgroup members

Srini — Thu, 03 Mar 2016 16:15:00 GMT

Hi,

This was our mistake, we missed to add the @ before the group name while giving access to the tables.

Thanks

Srini

Re: Hbase ACLs will apply for the subgroup members

Harsh J — Thu, 03 Mar 2016 17:01:59 GMT

Thank you for following up as always, Srini!