Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

hadoop fs command is not authenticated by kerberos

hadoop fs command is not authenticated by kerberos

New Contributor

I built my cluster with CDH5.7.5 and enabled kerberos. The kerberos service is provided by freeIPA. “hdfs dfs” or “hadoop dfs” works well with the authentication, unauthorized users cannot access this cluster. However, “hadoop fs” command can still access all directories without any user authentication. I am confused since I believe the “hadoop fs” and “hdfs dfs” should work in the same behavior since they all call FsShell class.

3 REPLIES 3

Re: hadoop fs command is not authenticated by kerberos

Expert Contributor

Hi @Yongkun,

 

In wich groups are those users?

 

 

Regards,

Manu.

Re: hadoop fs command is not authenticated by kerberos

New Contributor

Hi @manuroman ,

 

Any user in any group can access. I didn't add those users by ipa.

 

Regards,

Yongkun

Highlighted

Re: hadoop fs command is not authenticated by kerberos

Super Guru

@Yongkun,

 

Please demonstrate, with example, what is "working" and what is "not working?"

Listing each step (including kinit) will help us understand what you are facing.

 

If you cluster has Kerberos Authentication enabled, then in order to access HDFS, you will need to have credentials.  A user without valid kerberos credentials cannot access HDFS so there may be a misunderstanding regarding the test results.

 

Thanks,

 

Ben