[
https://issues.apache.org/jira/browse/MAPREDUCE-1611?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12847437#action_12847437
]
Amar Kamat commented on MAPREDUCE-1611:
---------------------------------------
_ServiceAuthorizationManager_ authorizes users against the ACLs specified for
the protocol used. With service level authorization enabled, when a user tries
to refresh the nodes at the _JobTracker_, _ServiceAuthorizationManager_ tries
to authorize the user against the ACL specified for _AdminOperationsProtocol_.
For MapReduce, the list of protocols to be authorized is provided by
_MapReducePolicyProvider_. _MapReducePolicyProvider_ doesnt list
_AdminOperationsProtocol_ causing 'refreshNodes' to fail.
> Refresh nodes and refresh queues doesnt work with service authorization
> enabled
> -------------------------------------------------------------------------------
>
> Key: MAPREDUCE-1611
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-1611
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Components: security
> Reporter: Amar Kamat
>
> If service-level authorization enabled (i.e _hadoop.security.authorization_
> set to *true*) for MapReduce then refreshing the node and queue fails with
> the following message
> {noformat}
> Protocol interface org.apache.hadoop.mapred.AdminOperationsProtocol is not
> known.
> {noformat}
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
