Repository: ambari
Updated Branches:
  refs/heads/trunk 9bf9bbc84 -> 2a844d706


AMBARI-21250 update yarn-env.xml in HDP2.6 for YARN sinks' HTTP SPNEGO 
Authentication (qinliu via dsen)


Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/2a844d70
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/2a844d70
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/2a844d70

Branch: refs/heads/trunk
Commit: 2a844d706bb6c76812edee3cb0e57bad2f9c5776
Parents: 9bf9bbc
Author: Dmytro Sen <d...@apache.org>
Authored: Mon Jun 19 12:13:02 2017 +0300
Committer: Dmytro Sen <d...@apache.org>
Committed: Mon Jun 19 12:13:02 2017 +0300

----------------------------------------------------------------------
 .../HDP/2.6/services/YARN/configuration/yarn-env.xml | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ambari/blob/2a844d70/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
----------------------------------------------------------------------
diff --git 
a/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
 
b/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
index 1b2ca68..121a81d 100644
--- 
a/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
+++ 
b/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
@@ -108,7 +108,9 @@
       # Specify the JVM options to be used when starting the ResourceManager.
       # These options will be appended to the options specified as YARN_OPTS
       # and therefore may override any similar flags set in YARN_OPTS
-      #export YARN_RESOURCEMANAGER_OPTS=
+      {% if security_enabled %}
+      export 
YARN_RESOURCEMANAGER_OPTS="-Djava.security.auth.login.config={{yarn_jaas_file}}"
+      {% endif %}
 
       # Node Manager specific parameters
 
@@ -130,10 +132,16 @@
       # or JAVA_HEAP_MAX with YARN_HEAPMAX as the preferred option of the two.
       export YARN_TIMELINESERVER_HEAPSIZE={{apptimelineserver_heapsize}}
 
+      {% if security_enabled %}
+      export 
YARN_TIMELINESERVER_OPTS="-Djava.security.auth.login.config={{yarn_ats_jaas_file}}"
+      {% endif %}
+
       # Specify the JVM options to be used when starting the NodeManager.
       # These options will be appended to the options specified as YARN_OPTS
       # and therefore may override any similar flags set in YARN_OPTS
-      #export YARN_NODEMANAGER_OPTS=
+      {% if security_enabled %}
+      export 
YARN_NODEMANAGER_OPTS="-Djava.security.auth.login.config={{yarn_nm_jaas_file}}"
+      {% endif %}
 
       # so that filenames w/ spaces are handled correctly in loops below
       IFS=
@@ -174,6 +182,9 @@
       {% if rm_security_opts is defined %}
       YARN_OPTS="{{rm_security_opts}} $YARN_OPTS"
       {% endif %}
+      {% if security_enabled %}
+      YARN_OPTS="$YARN_OPTS -Djavax.security.auth.useSubjectCredsOnly=false"
+      {% endif %}
     </value>
     <value-attributes>
       <type>content</type>

Reply via email to