hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Amar Kamat (JIRA)" <j...@apache.org>
Subject [jira] Commented: (MAPREDUCE-1611) Refresh nodes and refresh queues doesnt work with service authorization enabled
Date Fri, 19 Mar 2010 16:56:31 GMT

    [ https://issues.apache.org/jira/browse/MAPREDUCE-1611?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12847437#action_12847437
] 

Amar Kamat commented on MAPREDUCE-1611:
---------------------------------------

_ServiceAuthorizationManager_ authorizes users against the ACLs specified for the protocol
used. With service level authorization enabled, when a user tries to refresh the nodes at
the _JobTracker_, _ServiceAuthorizationManager_ tries to authorize the user against the ACL
specified for _AdminOperationsProtocol_. For MapReduce, the list of protocols to be authorized
is provided by _MapReducePolicyProvider_. _MapReducePolicyProvider_ doesnt list _AdminOperationsProtocol_
causing 'refreshNodes' to fail.

> Refresh nodes and refresh queues doesnt work with service authorization enabled
> -------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1611
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1611
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: security
>            Reporter: Amar Kamat
>
> If service-level authorization enabled (i.e _hadoop.security.authorization_ set to *true*)
for MapReduce then refreshing the node and queue fails with the following message
> {noformat}
> Protocol interface org.apache.hadoop.mapred.AdminOperationsProtocol is not known.
> {noformat}

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message