liubin101 commented on PR #6100: URL: https://github.com/apache/hadoop/pull/6100#issuecomment-1726832136
@slfan1989 I deployed a router(http://router1:8089) and a subcluster(http://sc1:8088), the config as below: ``` hadoop.http.authentication.type=simple yarn.router.webapp.interceptor-class.pipeline=org.apache.hadoop.yarn.server.router.webapp.FederationInterceptorREST ``` When I request http://router1:8089/ws/v1/cluster/apps , it will be forward to http://sc1:8088/ws/v1/cluster/apps , the code flow should be: RouterWebServices#getApps -> FederationInterceptorREST#getApps -> DefaultRequestInterceptorREST#getApps -> RouterWebServiceUtil#genericForward In this situation, hsr!=null but hsr.getUserPrincipal()==null, so callerUGI==null, genericForward will return null Router logs as below: ``` ERROR org.apache.hadoop.yarn.server.router.webapp.RouterWebServiceUtil: Unable to obtain user name, user not authenticated ERROR org.apache.hadoop.yarn.server.router.webapp.FederationInterceptorREST: Subcluster sc1 failed to return appReport. ``` So I think when hadoop.http.authentication.type=simple, genericForward should not authenticate user. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
