Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

dfs.permissions.superusergroup in ambari 2.7.1

avatar
Explorer

Hi,

The hdfs encryption guide for HDP 3.0.1 states "In Ambari, replace the current value of dfs.permissions.superusergroup with the group name “operator”" however, this option is not available from Ambari, so it looks like the fix applied in 2.6.0 is not working for 2.7.1.

I also checked the workaround suggested in this community post but commenting or even removing the tag does not change anything from Ambari's UI perspective.

Versions used:

ambari 2.7.1.0-169

HDP 3.0.1.0-187

Does anyone have other workaround or fix to this?

Thank you in advance.

1 ACCEPTED SOLUTION

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
3 REPLIES 3

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login

avatar

Hi @Diego J,

Just to add to this. this feature was caused due to fixing of https://issues.apache.org/jira/browse/AMBARI-22086 where the developer makes the dfs.permissions.superusergroup a group property so that ambari doesn't show it in any tab.

If you want to show this in ambari. we can go to : /var/lib/ambari-server/resources/common-services/HDFS/2.1.0.2.0/configuration/hdfs-site.xml

( i am not sure if this is the path for HDP-3.x versions, please use find command in /var/lib/ambari-server/resources/common-services/ to figure out your path )

and remove : <property-type>GROUP</property-type> for : dfs.permissions.superusergroup

refer to fix of this issue here : https://reviews.apache.org/r/62669/diff/1#1

Please accept answer if you find this helpful.

avatar
Explorer

Hi @Akhil S Naik, thank you for your answers. Using the config.py script works good, I'm only going to add that you need to use "-s https" when security has been already configured, like this:

/var/lib/ambari-server/resources/scripts/configs.py -l <ambari-server> -t 8443 -s https -u <admin-user> -p <passwd> -a set -n <cluster-name> -c hdfs-site  -k dfs.permissions.superusergroup -v hdfs,<superuser_group>

And for the second answer, I'm going to add that in HDP 3.0.1, the right path to remove the property <property-type>GROUP</property-type> is:

/var/lib/ambari-server/resources/stacks/HDP/3.0/services/HDFS/configuration/hdfs-site.xml