Sample MAPR DataTap - No Impersonation

This image shows a sample MAPR DataTap without impersonation.



This sample DataTap Enable does not have the Enable Impersonation option enabled. In this case:

  • If a real user logs in to the container and creates a new file against a MapR DataTap without impersonation, then the file owner will be the ticket user. For example, if the real user testuser logs in to a container and creates a new file by executing the command Hadoop fs -put ./testfile dtap://remote/, then the actual file owner of testfile will be mapr in the MapR cluster.
  • If a real user logs in to the container to list the files against the MapR DataTap without impersonation, then the file owner will be the currently-logged-in user. In this case, the DataTap purposely shows the currently-logged-in user as the file owner to shield the information of the ticket user. For example, if the real user testuser logs in to the container to list the directory by executing the command Hadoop fs -ls dtap://remote/, then the output will show that the owner of the sub-directory and files is testuser.