Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-25263

rm_security_opts should not be configured in YARN_OPTS/HADOOP_OPTS

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.7.0
    • Fix Version/s: None
    • Component/s: ambari-server
    • Labels:

      Description

      After AMBARI-22824, rm_security_opts is defined in YARN_OPTS. YARN_OPTS is used by every single yarn command and daemon.

      But this is not correct as rm_security_opts refers to the yarn_jaas.conf which contains the ResourceManager keytab and principal.

      This leads to issues in certain kerberos environments where yarn client commands will not work for users not having access to the Resoucemanager keytab.

      We should instead set rm_security_opts to YARN_RESOURCEMANAGER_OPTS.

       

       

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              tarunparimi Tarun Parimi
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: