question Re: HDFS ACL in Archives of Support Questions (Read Only)

HDFS ACL

robinwood — Fri, 16 Sep 2022 09:33:16 GMT

Hi All ,

I am facing issue while enabling the acl, As per the CDH document for enabling the ACL we need to set acl enable to true.

<property>
<name>dfs.namenode.acls.enabled</name>
<value>true</value>
</property>

I have updated the same in below hdfs-site.xml files, post enabling the ACL, I restart the namenode service from CDH console.

/etc/hadoop/conf.cloudera.hdfs/hdfs-site.xml

/etc/hadoop/conf/hdfs-site.xml

While setting the ACL for a directory I am getting the below error.

" setfacl: The ACL operation has been rejected. Support for ACLs has been disabled by setting dfs.namenode.acls.enabled to false"

And please let me know in which hdfs-site.xml I should enable the acl in the below location I could see the hdfs-site.xml files.

/etc/hadoop/conf/hdfs-site.xml

/etc/hive/conf.cloudera.hive/hdfs-site.xml

/etc/hadoop/conf.cloudera.hdfs/hdfs-site.xml

/etc/hadoop/conf.cloudera.yarn/hdfs-site.xml

/var/run/cloudera-scm-agent/process/49-hdfs-NAMENODE/hdfs-site.xml

/var/run/cloudera-scm-agent/process/45-hdfs-SECONDARYNAMENODE/hdfs-site.xml

Please let know the appropriate file for enabling the ACL.

Thanks

Re: HDFS ACL

GautamG — Mon, 06 Jul 2015 12:15:55 GMT

Cloudera Manager manages two sets of properties:
- client side is in /etc/SERVICE/conf (SERVICE is hadoop, hive, etc)
- /var/run/cloudera-scm-agent/process/ID-service-ROLE

For service properties, edit it in CM and it will appear in /var/run on the
next restart of the role. Please read this blog post about how Cloudera
Manager works, it should be clearer to you.

http://blog.cloudera.com/blog/2013/07/how-does-cloudera-manager-work/

Re: HDFS ACL

robinwood — Tue, 07 Jul 2015 13:36:57 GMT

Gautham,

Thanks a lot,

Re: HDFS ACL

srikantitalluri — Tue, 17 Nov 2015 07:05:02 GMT

I changed hdfs-site.xml under /etc/hadoop/ and restarted name-node. However, I don't see the acl-edit RPC are accepted.

hdfs@qa-node109:/root$ hdfs dfs -setfacl -m user:priv:rw- /testfile

setfacl: The ACL operation has been rejected. Support for ACLs has been disabled by setting dfs.namenode.acls.enabled to false.

What did I miss here?

Re: HDFS ACL

srikantitalluri — Tue, 17 Nov 2015 07:06:37 GMT

I meant the hdfs-site.xml under /etc/hadoop/conf