ECS 3.6.2 Data Access Guide

ECS must be able to map group details for Hadoop service principals like hdfs, hive, and so on. If you are using Active Directory (AD), group information can be found from two different sources: the bucket metadata or AD. ECS determines which source to use from a configuration parameter setting in the /opt/storageos/conf/hdfssvc.conf configuration file in the [hdfs.fs.request] section.

If you want ECS to use bucket metadata for group information (if available) instead of AD, define the parameter as follows:

[hdfs.fs.request]
prefer_secure_metadata_bucket_for_groups = true

[hdfs.fs.request]
prefer_secure_metadata_bucket_for_groups = false

The default value is true, so if this value is not defined, ECS determines group details for a Kerberos principal from the bucket metadata. You must apply any change to all ECS nodes and you must restart dataheadsvc on all nodes.