hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vinod Kumar Vavilapalli (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-2715) Proxy user is problem for RPC interface if yarn.resourcemanager.webapp.proxyuser is not set.
Date Tue, 21 Oct 2014 19:11:34 GMT

    [ https://issues.apache.org/jira/browse/YARN-2715?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14178867#comment-14178867
] 

Vinod Kumar Vavilapalli commented on YARN-2715:
-----------------------------------------------

More comments
 - AdminService should also start recognizing the new proxyuser prefix. It will be useful
to refactor the proxy-user handling into a common method that is used in both RM and AdminService.
 - Add comments in RMAuthenticationFilterInitializer about why we are having special handling
of proxy-users.

Please ignore my other comments about filter. We need to fix them separately, outlining below
 - Similar to the configuration that you changed, we also need to get rid of RM_WEBAPP_DELEGATION_TOKEN_AUTH_FILTER
(is this a compatible change?)?
 - ResourceManager.startWepApp() used to allow loading common auth-filter, we now require
our custom filter for various reasons? /cc Varun Vasudev
 - RMAuthenticationFilterInitializer.configPrefix doesn't need to be a class variable.
 - RMAuthenticationFilterInitializer and TimelineAuthenticationFilterInitializer share a lot
of code, they can be refactored.

I'll file tickets for the above.

> Proxy user is problem for RPC interface if yarn.resourcemanager.webapp.proxyuser is not
set.
> --------------------------------------------------------------------------------------------
>
>                 Key: YARN-2715
>                 URL: https://issues.apache.org/jira/browse/YARN-2715
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: resourcemanager
>    Affects Versions: 2.6.0
>            Reporter: Zhijie Shen
>            Assignee: Zhijie Shen
>            Priority: Blocker
>         Attachments: YARN-2715.1.patch, YARN-2715.2.patch
>
>
> After YARN-2656, if people set hadoop.proxyuser for the client<-->RM RPC interface,
it's not going to work, because ProxyUsers#sip is a singleton per daemon. After YARN-2656,
RM has both channels that want to set this configuration: RPC and HTTP. RPC interface sets
it first by reading hadoop.proxyuser, but it is overwritten by HTTP interface, who sets it
to empty because yarn.resourcemanager.webapp.proxyuser doesn't exist.
> The fix for it could be similar to what we've done for YARN-2676: make the HTTP interface
anyway source hadoop.proxyuser first, then yarn.resourcemanager.webapp.proxyuser.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message