Resolving Username with UID and GIDs During Impersonation

Lists parameters for configuring impersonation.

To resolve username with UID and GIDs on the server (and not the local operating system registry) during impersonation, set the following configuration parameters on the client and CLDB:

Parameter Description
fs.mapr.server.resolve.user Must be set in core-site.xml file on the client machine. Value can be one of the following:
  • true - enable
  • false - disable

By default, this parameter is disabled. If enabled, the client requests the CLDB to resolve the user with UID/GIDs. For example, to enable this property, your entry in the core-site.xml file should be as shown below:

<configuration>
  <property>
    <name>fs.mapr.server.resolve.user</name>
    <value>true</value>
  </property>
</configuration>
cldb.security.resolve.user Must be set using the config command. Value can be one of the following:
  • 0 - disable
  • 1 - enable

By default, this is disabled. If enabled, CLDB resolve thes user with UID/GIDs for all incoming client requests. For example, to enable this property, run the following command:

maprcli config save -values {cldb.security.resolve.user:1}
NOTE Both configuration parameters must be set to enable support for UID/GID resolution on the server. If the configuration parameter is set on the client to resolve on the server and if the configuration parameter is not set on CLDB, the operation fails with an error.