[
https://issues.apache.org/jira/browse/TEZ-3418?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16551221#comment-16551221
]
Jonathan Eagles commented on TEZ-3418:
--------------------------------------
[~shenyinjie], Can you help me understand your setup, specifically ? Understand
Tez UI is simply a static web page that provides no security directly, but
relies on the hosting service to provide authentication. If the
DelegationTokenAuthenticationHandler doesn't see a delegation token, then it
assumes we are running from the command line and tries to do kerberos
authentication. This is not going to work in common setups (though perhaps with
SPNEGO?).
- What is the hosting service for the Tez UI? (YARN's Application History
Server, Ambari, jetty, tomcat, nodejs, etc)
- What service filter is providing the translation between browser's logged in
user to Hadoop's delegation token or kerberos ticket (SPNEGO?) Custom browser
cookie to Delegation Token jetty filter?
If you are hosting like above in the application history server, please list
the filter chain to see what is missing.
> Tez UI/UI2 doesn't support kerberized cluster
> ---------------------------------------------
>
> Key: TEZ-3418
> URL: https://issues.apache.org/jira/browse/TEZ-3418
> Project: Apache Tez
> Issue Type: Improvement
> Components: UI
> Affects Versions: 0.8.3
> Environment: Tez 0.8.3, Hadoop 2.7.2
> Reporter: Alexandre Linte
> Priority: Major
>
> Today it is not possible to use Tez UI/UI2 in a Kerberized cluster without
> Ambari.
> This feature request asks for an improvement of the Tez UI2 in order to fully
> support Kerberos.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
