[DRILL-6983] PAM Auth Enabled on Drill-On-YARN only works on YARN user

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.14.0, 1.15.0
• Component/s: Client - HTTP
• Assignee: Unassigned
• Reporter: Michael Dennis Uanang
• Created: 17/Jan/19 07:26
• Updated: 01/Feb/19 07:10

Description

Hi,

I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM auth is working, BUT only accepting login via WEBUI for YARN user.

drill-override.conf

 

drill.exec: {

 cluster-id: "drillbits2",
 zk.connect: "app40:2181,app41:2181,app42:2181",
 impersonation: {
  enabled: true
 },
security: {
  auth.mechanisms: [ "PLAIN" ],
  user.auth.enabled: true,
  user.auth.packages += "org.apache.drill.exec.rpc.user.security",
  user.auth.impl: "pam",  
  user.auth.pam_profiles: [ "login", "sshd" ]
  }
}

 

 

SEE errors below:

 

As you can see from the screenshot, when trying to login via WEBUI using infra or drill user, I'm having error 'password check failed for user (USER)`. But you'll also notice that it's giving me authentication failure for UID=1018 which is YARN 

 

Please help me to right direction or if I'm missing something.

Thank you.

 

MD