[ 
https://issues.apache.org/jira/browse/DRILL-6983?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Dennis Uanang updated DRILL-6983:
-----------------------------------------
    Description: 
Hi,

I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM 
auth is working, BUT only accepting login via WEBUI for YARN user.

_drill-override.conf_

 
{code:java}
drill.exec: {

 cluster-id: "drillbits2",
 zk.connect: "app40:2181,app41:2181,app42:2181",
 impersonation: {
  enabled: true
 },
security: {
  auth.mechanisms: [ "PLAIN" ],
  user.auth.enabled: true,
  user.auth.packages += "org.apache.drill.exec.rpc.user.security",
  user.auth.impl: "pam",  
  user.auth.pam_profiles: [ "login", "sshd" ]
  }
}
{code}
 

 

SEE errors below:

!Selection_999(204).png!

 

!Selection_999(203).png!

As you can see from the screenshot, when trying to login via WEBUI using infra 
or drill user, I'm having error 'password check failed for user (USER)`. But 
you'll also notice that it's giving me authentication failure for UID=1018 
which is YARN 

!Selection_999(205).png!

 

Please help me to right direction or if I'm missing something.

Thank you.

 

MD

 

  was:
Hi,

I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM 
auth is working, BUT only accepting login via WEBUI for YARN user.

_drill-override.conf_

{{drill.exec: {}}
 cluster-id: "drillbits2",
 zk.connect: "app40:2181,app41:2181,app42:2181",
 impersonation:

{ enabled: true, }

,
 security:

{ auth.mechanisms: [ "PLAIN" ], user.auth.enabled: true, user.auth.packages += 
"org.apache.drill.exec.rpc.user.security", user.auth.impl: "pam",  
user.auth.pam_profiles: [ "login", "sshd" ] }

{{}}}

 

SEE errors below:

!Selection_999(204).png!

 

!Selection_999(203).png!

As you can see from the screenshot, when trying to login via WEBUI using infra 
or drill user, I'm having error 'password check failed for user (USER)`. But 
you'll also notice that it's giving me authentication failure for UID=1018 
which is YARN 

!Selection_999(205).png!

 

Please help me to right direction or if I'm missing something.

Thank you.

 

MD

 


> PAM Auth Enabled on Drill-On-YARN only works on YARN user
> ---------------------------------------------------------
>
>                 Key: DRILL-6983
>                 URL: https://issues.apache.org/jira/browse/DRILL-6983
>             Project: Apache Drill
>          Issue Type: Bug
>          Components: Client - HTTP
>    Affects Versions: 1.14.0, 1.15.0
>            Reporter: Michael Dennis Uanang
>            Priority: Blocker
>         Attachments: Selection_999(203).png, Selection_999(204).png, 
> Selection_999(205).png
>
>
> Hi,
> I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM 
> auth is working, BUT only accepting login via WEBUI for YARN user.
> _drill-override.conf_
>  
> {code:java}
> drill.exec: {
>  cluster-id: "drillbits2",
>  zk.connect: "app40:2181,app41:2181,app42:2181",
>  impersonation: {
>   enabled: true
>  },
> security: {
>   auth.mechanisms: [ "PLAIN" ],
>   user.auth.enabled: true,
>   user.auth.packages += "org.apache.drill.exec.rpc.user.security",
>   user.auth.impl: "pam",  
>   user.auth.pam_profiles: [ "login", "sshd" ]
>   }
> }
> {code}
>  
>  
> SEE errors below:
> !Selection_999(204).png!
>  
> !Selection_999(203).png!
> As you can see from the screenshot, when trying to login via WEBUI using 
> infra or drill user, I'm having error 'password check failed for user 
> (USER)`. But you'll also notice that it's giving me authentication failure 
> for UID=1018 which is YARN 
> !Selection_999(205).png!
>  
> Please help me to right direction or if I'm missing something.
> Thank you.
>  
> MD
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to