[
https://issues.apache.org/jira/browse/YARN-8722?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16595310#comment-16595310
]
Eric Yang commented on YARN-8722:
---------------------------------
This looks like a misconfiguration on the tested cluster. YARN user is not
allowed to impersonate hadoop user to access HDFS. YARN user must have proxy
user ACL setup to impersonate end user in order to access the home directory of
the end user in HDFS. Please check core-site.xml, and make sure that user have
the following defined:
{code:java}
<property>
<name>hadoop.proxyuser.yarn.groups</name>
<value>users</value>
</property>
<property>
<name>hadoop.proxyuser.yarn.hosts</name>
<value>rm1.example.com,rm2.example.com</value>
</property>{code}
> Failed to get native service application status when security is enabled
> -------------------------------------------------------------------------
>
> Key: YARN-8722
> URL: https://issues.apache.org/jira/browse/YARN-8722
> Project: Hadoop YARN
> Issue Type: Bug
> Components: yarn-native-services
> Reporter: Zac Zhou
> Priority: Major
> Attachments: stack.txt, standlone-tf.json
>
>
> Can't get job status with the following command, after a submarine job is
> submitted.
> bin/yarn app -status standlone-tf (service name)
> The environment context is as follows:
> 1) Security enabled.
> kerberos
> 2) Klist output
> Ticket cache: FILE:/tmp/krb5cc_1010
> Default principal: hadoop/admin@HADOOP.****.COM
> Valid starting Expires Service principal
> 08/28/2018 10:50:07 08/28/2018 20:50:07
> krbtgt/HADOOP.****.COM@HADOOP.****.COM
> renew until 08/29/2018 10:50:07
> 3) Service spec json.
> standlone-tf.json in the attachment
> 4) service HDFS path permission.
> drwxr-x--- - hadoop hdfs 0 2018-08-27 15:54
> hdfs://submarine/user/hadoop/.yarn/services/standlone-tf
> drwxr-x--- - hadoop hdfs 0 2018-08-27 15:54
> hdfs://submarine/user/hadoop/.yarn/services/standlone-tf/lib
> -rw-rw-rw- 2 hadoop hdfs 2228 2018-08-27 15:54
> hdfs://submarine/user/hadoop/.yarn/services/standlone-tf/standlone-tf.json
> 5) Stacktrace.
> stack.txt in the attachment
> 6) yarn app -status -> error.
> bin/yarn app -status standlone-tf (service name)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
