[OOZIE-1148] Set the renewer correctly for JT/RM delegation tokens

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.1
• Assignee: Rohini Palaniswamy
• Reporter: Rohini Palaniswamy
• Created: 26/Dec/12 21:49
• Updated: 20/Jul/13 00:03
• Resolved: 02/Jan/13 20:01

Description

HadoopAccessorService sets the renewer as "oozie mr token" for the delegation tokens instead of the JT or RM service principal name. Because of this long running jobs fail if the token lifetime is not set to 7 days (some value > 2 days) by JT. JT (Hadoop 1.0.2) did not have support for renewing and cancelling tokens to itself and so it did not matter what the renewer was set to. But that support is being added in RM in Hadoop 0.23/2.0.0 in YARN-50 as it would lead to RM going OOM as it runs with lot less memory than JT.

Sub-Tasks

• Set the RM token renewer as the full service principal instead of short name: Closed