[AMBARI-6093] Ambari secure cluster configures all users as yarn admins

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.1
• Fix Version/s: 1.6.1
• Component/s: ambari-web, site
• Assignee: Jaimin Jetly
• Reporter: Jaimin Jetly
• Created: 11/Jun/14 22:22
• Updated: 12/Jun/14 00:34
• Resolved: 12/Jun/14 00:34

Description

Ambari's configuration for a secure cluster has yarn-site.xml with:

  <property>
    <name>yarn.admin.acl</name>
    <value>*</value>
  </property>

which enables all users as yarn admins. It should set an empty list:

  <property>
    <name>yarn.admin.acl</name>
    <value></value>
  </property>

yarn.admin.acl should be set to an empty list for both secure and non-secure clusters. yarn.acl.enable should be set true/false depending on whether security is turned on.