Daniel Templeton created YARN-4353:
--------------------------------------
Summary: Provide short circuit user group mapping for NM/AM
Key: YARN-4353
URL: https://issues.apache.org/jira/browse/YARN-4353
Project: Hadoop YARN
Issue Type: Improvement
Components: nodemanager
Affects Versions: 2.7.1
Reporter: Daniel Templeton
When the NM launches an AM, the {{ContainerLocalizer}} gets the current user
from {{UserGroupInformation}}, which triggers user group mapping, even though
the user groups are never accessed. If secure LDAP is configured for group
mapping, then there are some additional complications created by the
unnecessary group resolution. Additionally, it adds unnecessary latency to the
container launch time.
To address the issue, before getting the current user, the
{{ContainerLocalizer}} should configure {{UserGroupInformation}} with a null
group mapping service that quickly and quietly returns an empty group list for
all users.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)