[
https://issues.apache.org/jira/browse/YARN-8864?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16646360#comment-16646360
]
Wilfred Spiegelenburg commented on YARN-8864:
---------------------------------------------
[~haibochen] If I understand you correctly we should be logging the remote user
and not the container user in the audit message.
I looked at the other messages that we log in the {{ContainerManagerImpl}}. We
use an "unknown user" when we authorise, I think in both cases we should use
the remote user from the remote UGI constructed.
I'll add a patch when I have finished the test runs
> NM incorrectly logs container user as the user who sent a stop container
> request in its audit log
> -------------------------------------------------------------------------------------------------
>
> Key: YARN-8864
> URL: https://issues.apache.org/jira/browse/YARN-8864
> Project: Hadoop YARN
> Issue Type: Bug
> Components: nodemanager
> Affects Versions: 3.2.0
> Reporter: Haibo Chen
> Assignee: Wilfred Spiegelenburg
> Priority: Major
>
> As in ContainerManagerImpl.java
> {code:java}
> protected void stopContainerInternal(ContainerId containerID)
> throws YarnException, IOException {
> ...
> NMAuditLogger.logSuccess(container.getUser(),
> AuditConstants.STOP_CONTAINER,
> "ContainerManageImpl",
> containerID.getApplicationAttemptId().getApplicationId(), containerID);
> }{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
