PowerScaleOneFS CLI Command Reference

Syntax

isi hdfs proxyusers modify <proxyuser>
        [--zone <string>]
        [--add-group <name>]
        [--add-gid <id>]
        [--add-uid <id>]
        [--add-user <name>]
        [--add-sid <sid>]
        [--add-wellknown <name>]
        [--remove-group <name>]
        [--remove-gid <id>]
        [--remove-uid <id>]
        [--remove-user <name>]
        [--remove-sid <sid>]
        [--remove-wellknown <name>]
        [{--verbose | -v}]
        [{--help | -h}]

Required Privileges

ISI_PRIV_HDFS

Options

<proxyuser>

Specifies the user name of a user currently configured on the cluster to be designated as a proxy user.

--zone <string>

Specifies the access zone the user authenticates through.

--add-group <name>

Adds the group specified by name to the list of proxy user members. The proxy user can impersonate any user in the group. The users in the group must authenticate to the same access zone as the proxy user. You can specify multiple group names in a comma-separated list.

--add-gid <id>

Adds the group by specified by UNIX GID to the list of proxy user members. The proxy user can impersonate any user in the group. The users in the group must authenticate to the same access zone as the proxy user. You can specify multiple UNIX GIDs in a comma-separated list.

--add-uid <id>

Adds the user specified by UNIX UID to the list of members the proxy user can impersonate. The user must authenticate to the same access zone as the proxy user. You can specify multiple UNIX UIDs in a comma-separated list.

--add-user <name>

Adds the user specified by name to the list of members the proxy user can impersonate. The user must authenticate to the same access zone as the proxy user. You can specify multiple user names in a comma-separated list.

--add-sid <sid>

Adds the user, group of users, machine or account specified by Windows SID to the list of proxy user members. The object must authenticate to the same access zone as the proxy user. You can specify multiple Windows SIDs in a comma-separated list.

--add-wellknown <name>

Adds the well-known user specified by name to the list of members the proxy user can impersonate. The well-known user must authenticate to the same access zone as the proxy user. You can specify multiple well-known user names in a comma-separated list.

--remove-group <name>

Specifies the name of the group to remove from the proxyuser. Specify --remove-group for each additional group name to remove.

--remove-gid <id>

Specifies GID of the group to remove from the proxyuser. Specify --remove-gid for each additional GID to remove.

--remove-uid <id>

Specifies UID of the user to remove from the proxyuser. Specify --remove-uid for each additional UID to remove.

--remove-sid <sid>

Specifies name of the user to remove from the proxyuser. Specify --remove-user for each additional name to remove. Specifies SID of the persona to remove from the proxyuser. Specify --remove-sid for each additional SID to remove.

--remove-user <name>

Specifies name of the user to remove from the proxyuser. Specify --remove-user for each additional name to remove.

--remove-wellknown <name>

Specifies well-known persona to remove from the proxyuser. Specify --remove-wellknown for each additional well-known persona to remove.

--verbose | -v

Displays more detailed information.

--help

Display help for this command.

Examples

The following command adds the well-known local user to, and removes the user whose UID is 2155 from, the list of members for proxy user hadoop-user23 in zone1:

isi hdfs proxyusers modify hadoop-user23 --zone=zone1 \
--add-wellknown=local --remove-uid=2155