Mailing-List: contact dev-help@flink.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@flink.apache.org
MIME-Version: 1.0
In-Reply-To: <1478874132510-14496.post@n3.nabble.com>
References: <28A8A654-46A4-454E-A553-099A60341EAA@maprtech.com>
 <CAC27z=NRsKi_rXBe-MQucUiSAZ5DkECBAUZzZSKhjRvPa-8Cyw@mail.gmail.com> <1478874132510-14496.post@n3.nabble.com>
From: Maximilian Michels <mxm@apache.org>
Date: Thu, 24 Nov 2016 18:22:33 +0100
Message-ID: <CAGco--ZosXP8_-8K-4YBPrNhqNQMfX6Cj+gFxrHvDEb=wAiQ7Q@mail.gmail.com>
Subject: Re: Flink using Yarn on MapR
To: dev@flink.apache.org
Cc: Naveen Tirupattur <ntirupattur@maprtech.com>
Content-Type: text/plain; charset=UTF-8
archived-at: Thu, 24 Nov 2016 17:22:56 -0000

Hi Naveen,

The new Kerberos authentication code in Flink assumes that we're
running against vanilla Hadoop. The unmodified Hadoop's behavior is to
skip a secure login if security is not configured. This is different
for the MapR Hadoop version.

Thus, we need to make sure we don't perform any login action if
security is not configured. I'm in the process of restructuring the
security code. I've submitted a first PR which fixes the problem
reported by you: https://github.com/apache/flink/pull/2864

Thanks,
Max

On Fri, Nov 11, 2016 at 3:22 PM, vijikarthi <vijikarthi@yahoo.com> wrote:
> Flink security context gets initialized during the application start phase.
> As part of the initialization, the UserGroupInformation (UGI) instance is
> bootstrapped using the Hadoop configuration files (read: HADOOP_CONF_DIR or
> YARN_CONF_DIR environment variable is set). If the hadoop configuration
> (core-site) enables security, then the UGI context uses JAAS module to
> load/login through Kerberos. Looks like in this case, the Hadoop
> configurations that got loaded somehow has the security enabled and UGI is
> trying to obtain the identity using keytab cache.
>
>
>
> --
> View this message in context: http://apache-flink-mailing-list-archive.1008284.n3.nabble.com/Flink-using-Yarn-on-MapR-tp14484p14496.html
> Sent from the Apache Flink Mailing List archive. mailing list archive at Nabble.com.