Actually, I ran some further tests and the property ranger.add-yarn-authorization set to false in ranger-yarn-security seems to prevent anyone to run jobs in any queue as my user "test" cannot submit a job into "test" queue according to YARN. Anyone encountered the same issue ?
FYI, I am using an HDP 2.4 stack. Regards, Loïc Loïc CHANEL System Big Data engineer MS&T - WASABI - Worldline (Villeurbanne, France) 2016-09-06 10:31 GMT+02:00 Loïc Chanel <loic.cha...@telecomnancy.net>: > Hi all, > > I'm back on the Hadoop & Multi-tenancy topic and as I ran some tests I > quite a big issue. > Using Ranger to handle which user can submit job to which queue I > authorized user "test" to submit jobs on queue "test" only - with the > property ranger.add-yarn-authorization set to false in ranger-yarn-security. > But even with these settings when user "test" submit a job it goes in the > "default" queue - to which he shouldn't be able to submit jobs. > > Do you see what I miss here ? > If not, do anyone knows how to turn on YARN Ranger plugin debug logs ? > > Thanks in advance for your inputs, > > > Loïc > > Loïc CHANEL > System Big Data engineer > MS&T - WASABI - Worldline (Villeurbanne, France) >
