[
https://issues.apache.org/jira/browse/AMBARI-15770?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alexander Denissov reopened AMBARI-15770:
-----------------------------------------
In some scenarios, HAWQ still cannot connect to YARN. We will need to widen the
group permission to "*" instead of "hadoop"
> HAWQ fails to connect to YARN in HA+SEC mode
> --------------------------------------------
>
> Key: AMBARI-15770
> URL: https://issues.apache.org/jira/browse/AMBARI-15770
> Project: Ambari
> Issue Type: Bug
> Reporter: Alexander Denissov
> Assignee: Alexander Denissov
> Fix For: 2.2.2
>
> Attachments: AMBARI-15770.branch22.patch
>
>
> When HAWQ is in the cluster with YARN HA and Kerberos enabled, the segments
> are down as they cannot connect to YARN RM.
> The following updates are required:
> 1. add hadoop.security.authentication = kerberos in yarn-client.xml
> 2. add 2 properties to core-site.xml:
> <property>
> <name>hadoop.proxyuser.postgres.hosts</name>
> <value>*</value>
> </property>
> <property>
> <name>hadoop.proxyuser.postgres.groups</name>
> <value>hadoop</value>
> </property>
> 3. on every node:
> sudo useradd postgres
> sudo usermod -a -G hadoop postgres
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)