[ 
https://issues.apache.org/jira/browse/YARN-62?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13690805#comment-13690805
 ] 

Omkar Vinit Joshi commented on YARN-62:
---------------------------------------

Right now on NM we start container only when we receive valid container token 
(which also contains expiration time). Using this expiration time to uniquely 
identify container as it is tightly coupled to container-id with one to many 
mapping between expiration time and container-ids.
                
> AM should not be able to abuse container tokens for repetitive container 
> launches
> ---------------------------------------------------------------------------------
>
>                 Key: YARN-62
>                 URL: https://issues.apache.org/jira/browse/YARN-62
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>    Affects Versions: 0.23.3, 2.0.0-alpha
>            Reporter: Vinod Kumar Vavilapalli
>            Assignee: Omkar Vinit Joshi
>
> Clone of YARN-51.
> ApplicationMaster should not be able to store container tokens and use the 
> same set of tokens for repetitive container launches. The possibility of such 
> abuse is there in the current code, for a duration of 1d+10mins, we need to 
> fix this.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to