The principal used for authenticating the framework is the same principal used to authorize the framework too. So you need to use 'marathon' in your credentials too. In other words, when you start the framework the Credential.principal should be the same as FrameworkInfo.principal (Mesos master will validate this).
On Sun, Mar 8, 2015 at 10:48 AM, Sivaram Kannan <[email protected]> wrote: > I0308 17:41:14.876610 6 master.cpp:1342] Authorizing framework > principal 'user1' to receive offers for role 'apps' > As you can see from this line, the master is trying to authorize principal 'user1' and not 'marathon'.

