[ 
https://issues.apache.org/jira/browse/YARN-4629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15140747#comment-15140747
 ] 

Hudson commented on YARN-4629:
------------------------------

FAILURE: Integrated in Hadoop-trunk-Commit #9272 (See 
[https://builds.apache.org/job/Hadoop-trunk-Commit/9272/])
YARN-4629. Distributed shell breaks under strong security. (Daniel (stevel: rev 
e9a622606f69dc926a950d4dd61fe3f16f378509)
* 
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-applications/hadoop-yarn-applications-distributedshell/src/main/java/org/apache/hadoop/yarn/applications/distributedshell/Client.java
* 
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-client/src/main/java/org/apache/hadoop/yarn/client/util/YarnClientUtils.java
* hadoop-yarn-project/CHANGES.txt
* 
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-client/src/test/java/org/apache/hadoop/yarn/client/util/TestYarnClientUtils.java
* 
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-client/src/main/java/org/apache/hadoop/yarn/client/util/package-info.java


> Distributed shell breaks under strong security
> ----------------------------------------------
>
>                 Key: YARN-4629
>                 URL: https://issues.apache.org/jira/browse/YARN-4629
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: applications/distributed-shell, security
>    Affects Versions: 2.7.1
>         Environment: Secure cluster with the RM principal listed with a 
> /_HOST entry to be expanded, most common with YARN HA enabled.
>            Reporter: Daniel Templeton
>            Assignee: Daniel Templeton
>             Fix For: 2.9.0
>
>         Attachments: YARN-4629.001.patch, YARN-4629.002.patch, 
> YARN-4629.003.patch, YARN-4629.004.patch
>
>
> If the auth_to_local is set to map requests from unknown hosts to nobody, the 
> dist shell app fails.  The reason is that the client doesn't translate the 
> _HOST placeholder to the local hostname.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to