Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Hbase ACLs will apply for the subgroup members?

avatar
Explorer

Hi,

 

We are running with acl error in HBase. One of our user named "x" is part of the group called "A". And "A" is part of another group "B".

Now Group "B" have access to a table "p" in Hbase.

 

When user "x" is trying to access table "p", he is getting error as access denied.

 

I want to know whether hbase acls supports subgroup members or only direct group members only will have access?

 

 

Thanks

Srini

1 ACCEPTED SOLUTION

avatar
Mentor
Unless "hdfs groups x" returns both "A" and "B" in its results,
HDFS/HBase/etc. would not be aware of such a relationship.

If you use SSSD+LDAP to resolve groups for your OS, you can request it to
query a certain level of nesting. See ldap_group_nesting_level under
http://linux.die.net/man/5/sssd-ldap.

View solution in original post

3 REPLIES 3

avatar
Mentor
Unless "hdfs groups x" returns both "A" and "B" in its results,
HDFS/HBase/etc. would not be aware of such a relationship.

If you use SSSD+LDAP to resolve groups for your OS, you can request it to
query a certain level of nesting. See ldap_group_nesting_level under
http://linux.die.net/man/5/sssd-ldap.

avatar
Explorer

Hi,

 

This was our mistake, we missed to add the @ before the group name while giving access to the tables.

 

Thanks

Srini

avatar
Mentor
Thank you for following up as always, Srini!