Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Hbase ACLs will apply for the subgroup members?

SOLVED Go to solution

Hbase ACLs will apply for the subgroup members?

Explorer

Hi,

 

We are running with acl error in HBase. One of our user named "x" is part of the group called "A". And "A" is part of another group "B".

Now Group "B" have access to a table "p" in Hbase.

 

When user "x" is trying to access table "p", he is getting error as access denied.

 

I want to know whether hbase acls supports subgroup members or only direct group members only will have access?

 

 

Thanks

Srini

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Hbase ACLs will apply for the subgroup members

Master Guru
Unless "hdfs groups x" returns both "A" and "B" in its results,
HDFS/HBase/etc. would not be aware of such a relationship.

If you use SSSD+LDAP to resolve groups for your OS, you can request it to
query a certain level of nesting. See ldap_group_nesting_level under
http://linux.die.net/man/5/sssd-ldap.
3 REPLIES 3

Re: Hbase ACLs will apply for the subgroup members

Master Guru
Unless "hdfs groups x" returns both "A" and "B" in its results,
HDFS/HBase/etc. would not be aware of such a relationship.

If you use SSSD+LDAP to resolve groups for your OS, you can request it to
query a certain level of nesting. See ldap_group_nesting_level under
http://linux.die.net/man/5/sssd-ldap.

Re: Hbase ACLs will apply for the subgroup members

Explorer

Hi,

 

This was our mistake, we missed to add the @ before the group name while giving access to the tables.

 

Thanks

Srini

Highlighted

Re: Hbase ACLs will apply for the subgroup members

Master Guru
Thank you for following up as always, Srini!