Karam Singh created YARN-2449:
---------------------------------
Summary: Timelineserver returns invalid Delegation token in secure
kerberos enabled cluster when hadoop.http.filter.initializers are not set
Key: YARN-2449
URL: https://issues.apache.org/jira/browse/YARN-2449
Project: Hadoop YARN
Issue Type: Bug
Components: timelineserver
Affects Versions: 2.6.0
Environment: Deploy security enabled cluster is ATS also enabled and
running, but no hadoop.http.filter.initializers set in core-site.xml
Reporter: Karam Singh
Timelineserver returns invalid Delegation token in secure kerberos enabled
cluster when hadoop.http.filter.initializers are not set
Looks in it is regression from YARN-2397
After YARN-2397. when no hadoop.http.filter.initializers is set
Now when try fetch DELEGATION token from ATS, it returns invalid token
Tried to fetch timeline delegation by using curl commands :
{code}
1. curl -i -k -s -b
'/grid/0/hadoopqe/y6/YarnWSAPISubmitAppKillApp/timeline-cookie.txt'
'http://atshost:8188/ws/v1/timeline?op=GETDELEGATIONTOKEN&renewer=hrt_qa'
Or
2. curl -i -k -s --negotiate -u :
'http://atshost:8188/ws/v1/timeline?op=GETDELEGATIONTOKEN&renewer=test_user'
{code}
Return response is for both queries:
{code}
{"About":"Timeline API"}
{code}
Whereas before YARN-2397 or if you set hadoop.http.filter.initializers =
TimelineAuthenticationFilterInitializer or AuthenticationFilterInitializer
First query returns DT and Second used to fail
--
This message was sent by Atlassian JIRA
(v6.2#6252)
