[jira] [Commented] (YARN-4065) container-executor error should include effective user id

2015-10-14 Thread Casey Brotherton (JIRA) 

[ 
https://issues.apache.org/jira/browse/YARN-4065?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14957973#comment-14957973
 ] 

Casey Brotherton commented on YARN-4065:


Have worked on this, in the middle of testing, I realized that the ordering of 
the checks was wrong.

The code checks if the program is owned by root, and setuid after trying to 
access the configuration file.

I am changing the ordering, and will still add an error message, however, it 
likely doesn't need to print the effective user-id.

> container-executor error should include effective user id
> -
>
> Key: YARN-4065
> URL: https://issues.apache.org/jira/browse/YARN-4065
> Project: Hadoop YARN
>  Issue Type: Improvement
>  Components: yarn
>Reporter: Casey Brotherton
>Assignee: Casey Brotherton
>Priority: Trivial
>
> When container-executor fails to access it's config file, the following 
> message will be thrown:
> {code}
> org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor: Exit code 
> from container executor initialization is : 24
> ExitCodeException exitCode=24: Invalid conf file provided : 
> /etc/hadoop/conf/container-executor.cfg
> {code}
> The real problem may be a change in the container-executor not running as set 
> uid root.
> From:
> https://hadoop.apache.org/docs/r2.6.0/hadoop-yarn/hadoop-yarn-site/SecureContainer.html
> {quote}
> The container-executor program must be owned by root and have the permission 
> set ---sr-s---.
> {quote}
> The error message could be improved by printing out the effective user id 
> with the error message, and possibly the executable trying to access the 
> config file.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Commented] (YARN-4065) container-executor error should include effective user id

2015-08-25 Thread Casey Brotherton (JIRA) 

[ 
https://issues.apache.org/jira/browse/YARN-4065?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14712391#comment-14712391
 ] 

Casey Brotherton commented on YARN-4065:


Absolutely.  Will start working on it

> container-executor error should include effective user id
> -
>
> Key: YARN-4065
> URL: https://issues.apache.org/jira/browse/YARN-4065
> Project: Hadoop YARN
>  Issue Type: Improvement
>  Components: yarn
>Reporter: Casey Brotherton
>Priority: Trivial
>
> When container-executor fails to access it's config file, the following 
> message will be thrown:
> {code}
> org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor: Exit code 
> from container executor initialization is : 24
> ExitCodeException exitCode=24: Invalid conf file provided : 
> /etc/hadoop/conf/container-executor.cfg
> {code}
> The real problem may be a change in the container-executor not running as set 
> uid root.
> From:
> https://hadoop.apache.org/docs/r2.6.0/hadoop-yarn/hadoop-yarn-site/SecureContainer.html
> {quote}
> The container-executor program must be owned by root and have the permission 
> set ---sr-s---.
> {quote}
> The error message could be improved by printing out the effective user id 
> with the error message, and possibly the executable trying to access the 
> config file.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Created] (YARN-4065) container-executor error should include effective user id

2015-08-19 Thread Casey Brotherton (JIRA) 
Casey Brotherton created YARN-4065:
--

 Summary: container-executor error should include effective user id
 Key: YARN-4065
 URL: https://issues.apache.org/jira/browse/YARN-4065
 Project: Hadoop YARN
  Issue Type: Improvement
  Components: yarn
Reporter: Casey Brotherton
Priority: Trivial


When container-executor fails to access it's config file, the following message 
will be thrown:

{code}
org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor: Exit code 
from container executor initialization is : 24
ExitCodeException exitCode=24: Invalid conf file provided : 
/etc/hadoop/conf/container-executor.cfg
{code}

The real problem may be a change in the container-executor not running as set 
uid root.

From:
https://hadoop.apache.org/docs/r2.6.0/hadoop-yarn/hadoop-yarn-site/SecureContainer.html

{quote}
The container-executor program must be owned by root and have the permission 
set ---sr-s---.
{quote}

The error message could be improved by printing out the effective user id with 
the error message, and possibly the executable trying to access the config file.






--
This message was sent by Atlassian JIRA
(v6.3.4#6332)