[
https://issues.apache.org/jira/browse/FLINK-5580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tzu-Li (Gordon) Tai updated FLINK-5580:
---------------------------------------
Description:
Setup: Kerberos security using keytabs, Flink on YARN deployment (in
standalone, it works fine without problems).
I’m getting these error messages in the YARN node managers, causing the
TaskManager containers to fail to start properly:
{{org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
as:tzulitai (auth:SIMPLE)
cause:org.apache.hadoop.security.AccessControlException: Client cannot
authenticate via:[TOKEN, KERBEROS]}}
The security configuration for Hadoop has been set to "kerberos", to the "auto:
SIMPLE" seems very strange. It also seems as if credential tokens has not been
properly set for the {{ContainerLaunchContext}}s, which may be an issue causing
this.
was:
Setup: Kerberos security using keytabs, Flink on YARN deployment (in
standalone, it works fine without problems).
I’m getting these error messages in the YARN node managers, causing the
TaskManager containers to fail to start properly:
{{org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
as:tzulitai (auth:SIMPLE)
cause:org.apache.hadoop.security.AccessControlException: Client cannot
authenticate via:[TOKEN, KERBEROS]}}
The security configuration for Hadoop has been set to "kerberos", to the "auto:
SIMPLE" seems very strange. It also seems as if credential tokens has not been
properly set for the `ContainerLaunchContext`s, which may be an issue causing
this.
> Kerberos keytabs not working for YARN deployment mode
> -----------------------------------------------------
>
> Key: FLINK-5580
> URL: https://issues.apache.org/jira/browse/FLINK-5580
> Project: Flink
> Issue Type: Bug
> Components: Security, YARN
> Reporter: Tzu-Li (Gordon) Tai
> Assignee: Tzu-Li (Gordon) Tai
> Priority: Critical
> Fix For: 1.2.0
>
>
> Setup: Kerberos security using keytabs, Flink on YARN deployment (in
> standalone, it works fine without problems).
> I’m getting these error messages in the YARN node managers, causing the
> TaskManager containers to fail to start properly:
> {{org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
> as:tzulitai (auth:SIMPLE)
> cause:org.apache.hadoop.security.AccessControlException: Client cannot
> authenticate via:[TOKEN, KERBEROS]}}
> The security configuration for Hadoop has been set to "kerberos", to the
> "auto: SIMPLE" seems very strange. It also seems as if credential tokens has
> not been properly set for the {{ContainerLaunchContext}}s, which may be an
> issue causing this.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
