hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Zhijie Shen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-2070) DistributedShell publishes unfriendly user information to the timeline server
Date Fri, 23 May 2014 20:13:01 GMT

    [ https://issues.apache.org/jira/browse/YARN-2070?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14007640#comment-14007640

Zhijie Shen commented on YARN-2070:

The situation here is that users are free to define their own filters, even if they duplicate
the system info. The system info should be invisible to users, such that user won't see, for
example, "ENTITY_OWNER" in the response timeline data. Then, if users want to show the user
information, they need to add it somewhere in the timeline entity/event, and this is what
distributed shell does.

The problem here is that the complete UGI name is used as the user in the distributed shell.
Therefore, we will see "zjshen/localhost@LOCALHOST (auth.KERBEROS)" or "zjshen (auth.SIMPLE)"
in the user field. The authentication details  is not much useful, IMO. And it will trouble
user when he want to query the timeline entities by filtering by user.

> DistributedShell publishes unfriendly user information to the timeline server
> -----------------------------------------------------------------------------
>                 Key: YARN-2070
>                 URL: https://issues.apache.org/jira/browse/YARN-2070
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Zhijie Shen
>            Assignee: Robert Kanter
>            Priority: Minor
>              Labels: newbie
>         Attachments: YARN-2070.patch
> Bellow is the code of using the string of current user object as the "user" value.
> {code}
>     entity.addPrimaryFilter("user", UserGroupInformation.getCurrentUser()
>         .toString());
> {code}
> When we use kerberos authentication, it's going to output the full name, such as "zjshen/localhost@LOCALHOST
(auth.KERBEROS)". It is not user friendly for searching by the primary filters. It's better
to use shortUserName instead.

This message was sent by Atlassian JIRA

View raw message