Uploaded image for project: 'Apache Drill'
  1. Apache Drill
  2. DRILL-6983

PAM Auth Enabled on Drill-On-YARN only works on YARN user

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 1.14.0, 1.15.0
    • None
    • Client - HTTP
    • None

    Description

      Hi,

      I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM auth is working, BUT only accepting login via WEBUI for YARN user.

      drill-override.conf

       

      drill.exec: {
      
       cluster-id: "drillbits2",
       zk.connect: "app40:2181,app41:2181,app42:2181",
       impersonation: {
        enabled: true
       },
      security: {
        auth.mechanisms: [ "PLAIN" ],
        user.auth.enabled: true,
        user.auth.packages += "org.apache.drill.exec.rpc.user.security",
        user.auth.impl: "pam",  
        user.auth.pam_profiles: [ "login", "sshd" ]
        }
      }
      

       

       

      SEE errors below:

       

      As you can see from the screenshot, when trying to login via WEBUI using infra or drill user, I'm having error 'password check failed for user (USER)`. But you'll also notice that it's giving me authentication failure for UID=1018 which is YARN 

       

      Please help me to right direction or if I'm missing something.

      Thank you.

       

      MD

       

      Attachments

        1. Selection_999(205).png
          13 kB
          Michael Dennis Uanang
        2. Selection_999(204).png
          40 kB
          Michael Dennis Uanang
        3. Selection_999(203).png
          43 kB
          Michael Dennis Uanang

        Activity

          People

            Unassigned Unassigned
            mikehomee Michael Dennis Uanang
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated: