Reply
Contributor
Posts: 25
Registered: ‎03-27-2015

HDFS Sentry Plugin Sync Interval

We currently have the Sentry Service installed with the HDFS Sentry Plugin enabled.  The synchronisation with the HDFS ACLs works fine but currently takes 3 hours to synchronise to the HDFS ACLs.  This means that when a new object is created the user cannot access the object via HDFS until the sync completes 3 hours later.  Is there a way of setting the sync interval?

Cloudera Employee
Posts: 41
Registered: ‎11-04-2015

Re: HDFS Sentry Plugin Sync Interval

Hi,

 

NameNode Sentry plugin checks every ACL with the Sentry service, but if that fails for any reason, it will look it up in the cache for a configured period of time. This is by default 60 seconds, but maybe it's configured for a higher value in your cluster with Safety Valve "sentry.authorization-provider.cache-stale-threshold.ms".

 

Can you verify that?

 

Thanks

 

Miklos Szurap

Customer Operations Engineer

Contributor
Posts: 25
Registered: ‎03-27-2015

Re: HDFS Sentry Plugin Sync Interval

The timeout setting is set at the default.  I guess I just wanted to understand the interval for the plugin checking Sentry for ACL replication.  It seems like it should be fairly 'immediate'.  We will need to investigate our environment further.  Thanks.

Announcements