Sample MAPR DataTap - No Impersonation
This image shows a sample MAPR DataTap without impersonation.
This sample DataTap Enable does not have the Enable Impersonation option enabled. In this case:
- If a real user logs in to the container and creates a new file against a MapR
DataTap without impersonation, then the file owner will be the ticket
user. For example, if the real user
testuser
logs in to a container and creates a new file by executing the commandHadoop fs -put ./testfile dtap://remote/
, then the actual file owner oftestfile
will bemapr
in the MapR cluster. - If a real user logs in to the container to list the files against the
MapR DataTap without impersonation, then the file owner will be the
currently-logged-in user. In this case, the DataTap purposely shows the
currently-logged-in user as the file owner to shield the information of the
ticket user. For example, if the real user
testuser
logs in to the container to list the directory by executing the commandHadoop fs -ls dtap://remote/
, then the output will show that the owner of the sub-directory and files istestuser
.