[
https://issues.apache.org/jira/browse/YARN-11155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
KWON BYUNGCHANG updated YARN-11155:
-----------------------------------
Attachment: YARN-11155.001.patch
> ATS v1.5 doesn't work with JWTRedirectAuthenticationHandler
> -----------------------------------------------------------
>
> Key: YARN-11155
> URL: https://issues.apache.org/jira/browse/YARN-11155
> Project: Hadoop YARN
> Issue Type: Bug
> Components: timelineserver
> Affects Versions: 3.1.2, 3.3.2
> Reporter: KWON BYUNGCHANG
> Priority: Major
> Attachments: YARN-11155.001.patch
>
>
> When ATS is configured with JWTRedirectAuthenticationHandler for KnoxSSO, In
> ATS, Delegation Token operation does not work.
> In this situation, All hadoop web daemon use JWTRedirectAuthenticationHandler
> for KnoxSSO. But ATS should be use kerberos auth handler. Tez job users
> should login to kerberos for spnego auth for tez-ui access in own local pc.
> It is very inconvenient.
>
> Expected result (use JWTRedirectAuthenticationHandler)
> {code:java}
> curl -s -u: --negotiate
> "https://ats.host.com:8190/ws/v1/timeline/?op=GETDELEGATIONTOKEN&&renewer=rm%2Frm1.host.com%40EXAMPLE.ORG";
> {
> "Token": {
> "urlString": "KAbnVtLWFkbWm8EsIAZVElNfREVMRUTl9UT0tFTgA"
> }
> }
> {code}
>
> Wrong result (use JWTRedirectAuthenticationHandler)
> {code:java}
> curl -s -u: --negotiate
> "https://ats.host.com:8190/ws/v1/timeline/?op=GETDELEGATIONTOKEN&&renewer=rm%2Frm1.host.com%40EXAMPLE.ORG";
> {
> "About": "Timeline API",
> "hadoop-build-version": "3.1.2 from
> 7c62584effd9a5aa4b90d22dbf8d8eb2bca03feb by irteam source checksum
> 444e3aaa7feb4f8f73c3c3a71dbdd38",
> "hadoop-version": "3.1.2",
> "hadoop-version-built-on": "2022-04-08T03:45Z",
> "timeline-service-build-version": "3.1.2-49 from
> 7c62584effd9a5aa4b90d22dbf8d8eb2bca03feb by users source checksum
> 7594ee7186b86eeccfc787d139ee8b",
> "timeline-service-version": "3.1.2",
> "timeline-service-version-built-on": "2022-04-08T03:49Z"
> }
> {code}
>
>
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
