01-28-2016 02:04 PM
We currently have the Sentry Service installed with the HDFS Sentry Plugin enabled. The synchronisation with the HDFS ACLs works fine but currently takes 3 hours to synchronise to the HDFS ACLs. This means that when a new object is created the user cannot access the object via HDFS until the sync completes 3 hours later. Is there a way of setting the sync interval?
02-04-2016 04:31 AM
NameNode Sentry plugin checks every ACL with the Sentry service, but if that fails for any reason, it will look it up in the cache for a configured period of time. This is by default 60 seconds, but maybe it's configured for a higher value in your cluster with Safety Valve "sentry.authorization-provider.cache-stale-threshold.ms".
Can you verify that?
Customer Operations Engineer
02-12-2016 02:28 AM
The timeout setting is set at the default. I guess I just wanted to understand the interval for the plugin checking Sentry for ACL replication. It seems like it should be fairly 'immediate'. We will need to investigate our environment further. Thanks.