hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Zhijie Shen (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (YARN-3287) TimelineClient kerberos authentication failure uses wrong login context.
Date Fri, 06 Mar 2015 00:27:40 GMT

    [ https://issues.apache.org/jira/browse/YARN-3287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14349674#comment-14349674
] 

Zhijie Shen edited comment on YARN-3287 at 3/6/15 12:27 AM:
------------------------------------------------------------

One concern: moving ugi computation into init will make the client only work for the user
who inits it. It cannot be shared with the other users. For example, if RM want to reuse one
client to publish data on behalf of different application users.


was (Author: zjshen):
One concern: moving ugi computation into init will make the client only work for the user
who inits it. It cannot be shared with the other users.

> TimelineClient kerberos authentication failure uses wrong login context.
> ------------------------------------------------------------------------
>
>                 Key: YARN-3287
>                 URL: https://issues.apache.org/jira/browse/YARN-3287
>             Project: Hadoop YARN
>          Issue Type: Bug
>            Reporter: Jonathan Eagles
>            Assignee: Daryn Sharp
>         Attachments: timeline.patch
>
>
> TimelineClientImpl:doPosting is not wrapped in a doAs, which can cause failure for yarn
clients to create timeline domains during job submission.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message