hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wilfred Spiegelenburg (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-8864) NM incorrectly logs container user as the user who sent a stop container request in its audit log
Date Thu, 11 Oct 2018 12:15:00 GMT

    [ https://issues.apache.org/jira/browse/YARN-8864?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16646360#comment-16646360
] 

Wilfred Spiegelenburg commented on YARN-8864:
---------------------------------------------

[~haibochen] If I understand you correctly we should be logging the remote user and not the
container user in the audit message.
I looked at the other messages that we log in the {{ContainerManagerImpl}}. We use an "unknown
user" when we authorise, I think in both cases we should use the remote user from the remote
UGI constructed.

I'll add a patch when I have finished the test runs

> NM incorrectly logs container user as the user who sent a stop container request in its
audit log
> -------------------------------------------------------------------------------------------------
>
>                 Key: YARN-8864
>                 URL: https://issues.apache.org/jira/browse/YARN-8864
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: nodemanager
>    Affects Versions: 3.2.0
>            Reporter: Haibo Chen
>            Assignee: Wilfred Spiegelenburg
>            Priority: Major
>
> As in  ContainerManagerImpl.java
> {code:java}
> protected void stopContainerInternal(ContainerId containerID)
>       throws YarnException, IOException { 
>     ...           
>     NMAuditLogger.logSuccess(container.getUser(), AuditConstants.STOP_CONTAINER,
>            "ContainerManageImpl", containerID.getApplicationAttemptId().getApplicationId(),
containerID);
> }{code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org


Mime
View raw message