Fixed Issues in HDFS

Cloudera Runtime 7.3.1.400 SP2

There are no fixed issues in this release.

CDPD-77765: Hadoop - Upgrade kafka-clients to 3.7.2/3.8.1+ due to CVE-2024-56128: Upgrade kafka client to 3.9.0 to fix CVE-2024-31141.
Apache Jira: HADOOP-19456

CDPD-78928: Backport HADOOP-16299 to avoid module access violation in LdapGroupsMapping: 7.3.1.200; When LdapGroupsMapping was the selected group mapping method, running any commands that relies on this group mapping lead to an exception due to a java module access violation when the JVM version was above Java11. This illegal access is avoided in the group mapping implementation without functional changes.
Apache Jira: HADOOP-16299
CDPD-75403: Temporary File Local Information Disclosure: 7.3.1.200; The issue is fixed and this fix enhances access control for the current directory of the RunJar so that only current user can have the access.
Apache Jira: HADOOP-19031
CDPD-69173: FsImage might have inaccessible nodes: 7.3.1.200; If a FsImage is corrupted, it may have inaccessible nodes. The FsImageValidation tool currently is able to identify the inaccessible nodes when validating the INodeMap. This fix updates the FsImageValidation to remove the inaccessible nodes.
Apache Jira: HDFS-17380

There are no fixed issues in this release.

OPSAPS-71677: When you are upgrading from Cloudera Base on premises 7.1.9 SP1 to Cloudera Base on premises 7.3.1, upgrade-rollback execution fails during HDFS rollback due to missing directory.: 7.3.1; This issue is now resolved. The HDFS meta upgrade command is executed by creating the previous directory due to which the rollback does not fail.
OPSAPS-71390: Cloudera Operational Database cluster creation is failing on INT and displays the Failed to create HDFS directory /tmp error.: 7.3.1; This issue is now resolved. Export options for jdk17 is added now.
OPSAPS-71188: Modify default value of dfs_image_transfer_bandwidthPerSec from 0 to a feasible value to mitigate RPC latency in the namenode.: 7.3.1; This issue is now resolved.
OPSAPS-58777: HDFS Directories are created with root as user.: 7.3.1; This issue is now resolved by fixinf service.sdl.
CDPD-67823: Ranger RMS gives all permissions to the user through the Create permission.: 7.3.1; This issue is now resolved. An additional check is added to ensure that the user attempting to alter any HDFS directory that maps to the Hive database is the owner of the Hive database.