HDFS ACL

[#1]

Hi All ,

I am facing issue while enabling the acl, As per the CDH document for enabling the ACL we need to set acl enable to true.

<property>
<name>dfs.namenode.acls.enabled</name>
<value>true</value>
</property>

I have updated the same in below hdfs-site.xml files, post enabling the ACL, I restart the namenode service from CDH console.

/etc/hadoop/conf.cloudera.hdfs/hdfs-site.xml

/etc/hadoop/conf/hdfs-site.xml

While setting the ACL for a directory I am getting the below error.

" setfacl: The ACL operation has been rejected. Support for ACLs has been disabled by setting dfs.namenode.acls.enabled to false"

And please let me know in which hdfs-site.xml I should enable the acl in the below location I could see the hdfs-site.xml files.

/etc/hadoop/conf/hdfs-site.xml

/etc/hive/conf.cloudera.hive/hdfs-site.xml

/etc/hadoop/conf.cloudera.hdfs/hdfs-site.xml

/etc/hadoop/conf.cloudera.yarn/hdfs-site.xml

/var/run/cloudera-scm-agent/process/49-hdfs-NAMENODE/hdfs-site.xml

/var/run/cloudera-scm-agent/process/45-hdfs-SECONDARYNAMENODE/hdfs-site.xml

Please let know the appropriate file for enabling the ACL.

Thanks

[#2 · Accepted solution]

Cloudera Manager manages two sets of properties:
- client side is in /etc/SERVICE/conf (SERVICE is hadoop, hive, etc)
- /var/run/cloudera-scm-agent/process/ID-service-ROLE

For service properties, edit it in CM and it will appear in /var/run on the
next restart of the role. Please read this blog post about how Cloudera
Manager works, it should be clearer to you.

http://blog.cloudera.com/blog/2013/07/how-does-cloudera-manager-work/

[#3]

Gautham,

Thanks a lot,

[#4]

I changed hdfs-site.xml under /etc/hadoop/ and restarted name-node. However, I don't see the acl-edit RPC are accepted.

hdfs@qa-node109:/root$ hdfs dfs -setfacl  -m user:priv:rw- /testfile

setfacl: The ACL operation has been rejected.  Support for ACLs has been disabled by setting dfs.namenode.acls.enabled to false.

What did I miss here?

[#5]

I meant the hdfs-site.xml under /etc/hadoop/conf