[
https://issues.apache.org/jira/browse/YARN-7702?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rohith Sharma K S updated YARN-7702:
------------------------------------
Description:
Both RM were running perfectly fine for many days and switched multiple times.
At some point of time when RM is switched from ACTIVE -> STANDBY, UGI
information got either changed or to subject new user got added.
As a result UGI#getShortUserName() is returning wrong user which result in fail
to transition to ACTIVE with AccessControlException!
{code}Caused by: org.apache.hadoop.security.AccessControlException: User
odsuser doesn't have permission to call 'refreshAdminAcls'
{code}
_odsuser_ user is application submitted user.
was:
Both RM were running perfectly fine for many days and switched multiple times.
At some point of time when RM is switched from ACTIVE -> STANDBY, UGI
information got either changed or to subject new user got added.
As a result UGI#getShortUserName() is returning wrong user which result in fail
to transition to ACTIVE with AccessControlException!
{code}Caused by: org.apache.hadoop.security.AccessControlException: User
odsuser doesn't have permission to call 'refreshAdminAcls'
{code}
> RM fail to transition to ACTIVE in secure cluster
> -------------------------------------------------
>
> Key: YARN-7702
> URL: https://issues.apache.org/jira/browse/YARN-7702
> Project: Hadoop YARN
> Issue Type: Bug
> Components: resourcemanager
> Reporter: Rohith Sharma K S
> Priority: Critical
>
> Both RM were running perfectly fine for many days and switched multiple
> times. At some point of time when RM is switched from ACTIVE -> STANDBY, UGI
> information got either changed or to subject new user got added.
> As a result UGI#getShortUserName() is returning wrong user which result in
> fail to transition to ACTIVE with AccessControlException!
> {code}Caused by: org.apache.hadoop.security.AccessControlException: User
> odsuser doesn't have permission to call 'refreshAdminAcls'
> {code}
> _odsuser_ user is application submitted user.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
