[
https://issues.apache.org/jira/browse/FLINK-12728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16888705#comment-16888705
]
wgcn commented on FLINK-12728:
------------------------------
hi Tao Yang,Andrey Zagrebin it's does work by setting
yarn.resourcemanager.proxy-user-privileges.enabled =true
,hadoop.proxyuser.yarn.hosts=*,hadoop.proxyuser.yarn.groups=* ,and it may be
useful for other user if it's recorded in flink document.
> taskmanager container can't launch on nodemanager machine because of
> kerberos
> -----------------------------------------------------------------------------------
>
> Key: FLINK-12728
> URL: https://issues.apache.org/jira/browse/FLINK-12728
> Project: Flink
> Issue Type: Bug
> Components: Deployment / YARN
> Affects Versions: 1.7.2
> Environment: linux
> jdk8
> hadoop 2.7.2
> flink 1.7.2
> Reporter: wgcn
> Priority: Major
> Attachments: AM.log, NM.log
>
>
> job can't restart when flink job has been running for a long time and
> then taskmanager restarting ,i find log in AM that AM request
> containers taskmanager all the time . the log in NodeManager show
> that the new requested containers can't downloading file from hdfs because
> of kerberos . I configed the keytab config that
> security.kerberos.login.use-ticket-cache: false
> security.kerberos.login.keytab: /data/sysdir/knit/user/.flink.keytab
> security.kerberos.login.principal: xxxxxxxxxxxxxxxx
> at flink-client machine and keytab is exist.
> I showed the logs at AM and NodeManager below.
>
>
>
>
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
