[BIGTOP-418] Package MAPREDUCE-2858 (MRv2 WebApp Security)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.4.0
• Fix Version/s: 0.4.0
• Component/s: general
• Assignee: Roman Shaposhnik
• Reporter: Roman Shaposhnik
• Created: 24/Feb/12 17:01
• Updated: 21/Jun/13 23:55
• Resolved: 25/Feb/12 01:48

Description

A new server has been added to yarn. It is a web proxy that sits in front of the AM web UI. The server is controlled by the yarn.web-proxy.address config. If that config is set, and it points to an address that is different then the RM web interface then a separate proxy server needs to be launched.

This can be done by running

yarn-daemon.sh start proxyserver

If a separate proxy server is needed other configs also may need to be set, if security is enabled.
yarn.web-proxy.principal
yarn.web-proxy.keytab

The proxy server is stateless and should be able to support a VIP or other load balancing sitting in front of multiple instances of this server.

Issue Links

• is related to: MAPREDUCE-3101 [Umbrella] Security issues in YARN