Hadoop Security Guide
Also available as:
loading table of contents...

Configuring Group Mapping

To map authenticated users to groups:

  1. Open the cluster topology descriptor file, $cluster-name.xml, in a text editor.

  2. Add a Pseudo identity-assertion provider to topology/gateway with the group.principal.mapping parameter as follows:



    • the value is a semi-colon-separated list of user & group mappings and the variables are specific to your environment.

    • $user1,$user2,$user3 are a comma-separated list of authenticated usernames or the wildcard (*) indicating all users. A username can be specified only once.

    • $group1,$group2,$group3 are the names of the group that the user is in for Service Level Authorization.

  3. Save the file.

    The gateway creates a new WAR file with modified timestamp in $gateway/data/deployments.