question Re: HDFS ACLs in Archives of Support Questions (Read Only)

HDFS ACLs

cgmuros — Fri, 16 Sep 2022 10:10:12 GMT

Hello, I trying to use Acls in My cluster Cloudera. I modified /etc/hadoop/conf/hdfs-site.xml property to true

<property>
<name>dfs.namenode.acls.enabled</name>
<value>true</value>
</property>

but when I execute a acls command I receive the next message

setfacl: The ACL operation has been rejected. Support for ACLs has been disabld by setting dfs.namenode.acls.enabled to false.

Thanks,

Re: HDFS ACLs

michalis — Fri, 18 Mar 2016 18:02:56 GMT

Is your cluster managed by Cloudera Manager server, or are you managing the Hadoop configurations using an editor?

Re: HDFS ACLs

cgmuros — Fri, 18 Mar 2016 18:07:30 GMT

Hi Michalis, I'm using cloudera-quickstart-vm-5.5.0-0-virtualbox over virtualbox.

I'm sure who is managing the cluster.

Regards,

Re: HDFS ACLs

michalis — Fri, 18 Mar 2016 18:45:08 GMT

In you cloudera-quickstart-vm-5.5.0-0-virtualbox over virtualbox, open the web browser navigate and login to Cloudera Manager. In Cloudera Manager Server Homepage using your keyboard hit the Search Hotkey " / " (a forward slash without the quotes). Then again using your keboard type acl - from the drop-down list select the 'hdfs: Enable Access Control Lists' < this should take you to the relevant configuration page where you have to click on the checkbox > [Save] and restart the hdfs service.

Re: HDFS ACLs

cgmuros — Mon, 21 Mar 2016 12:37:58 GMT

Michalis, thanks for your help. It's OK.

But now I have other problem. I have two user created into OS LInux, and two groups.

cgmuros -> grp_cl_developer

cgmurosbrasil -> grp_br_developer

I defined the next permissions.

# /chile/desarrollo/000_int_project drwxr-x--- hdfs:grp_cl_developer

I execute the next command to assign read and execute to cgmurosbrasil user

# sudo -u hdfs hadoop fs -setfacl -R -m user:cgmurosbrasil:r-x /chile/desarrollo/000_int_project

When I use the cgmurosbrasil and execute the next command I receive the next message

# hadoop fs -ls /chile/desarrollo/000_int_project

"Permission denied: user=cgmurosbrasil, access=EXECUTE, inode="/chile":hdfs:grp_cl_developer:drwxr-x---"

Thanks for your time.

Re: HDFS ACLs

cgmuros — Mon, 21 Mar 2016 12:55:54 GMT

I fixed assigning r-x to chile directory.

# sudo -u hdfs hadoop fs -setfacl -R -m user:cgmurosbrasil:r-x /chile

Thanks.