Daniel Templeton created YARN-4353:

             Summary: Provide short circuit user group mapping for NM/AM
                 Key: YARN-4353
                 URL: https://issues.apache.org/jira/browse/YARN-4353
             Project: Hadoop YARN
          Issue Type: Improvement
          Components: nodemanager
    Affects Versions: 2.7.1
            Reporter: Daniel Templeton

When the NM launches an AM, the {{ContainerLocalizer}} gets the current user 
from {{UserGroupInformation}}, which triggers user group mapping, even though 
the user groups are never accessed.  If secure LDAP is configured for group 
mapping, then there are some additional complications created by the 
unnecessary group resolution.  Additionally, it adds unnecessary latency to the 
container launch time.

To address the issue, before getting the current user, the 
{{ContainerLocalizer}} should configure {{UserGroupInformation}} with a null 
group mapping service that quickly and quietly returns an empty group list for 
all users.

This message was sent by Atlassian JIRA

Reply via email to