[HADOOP-14728] Configuring AuthenticationFilterInitializer throws IllegalArgumentException: Null user

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Krishna Pandey
• Created: 02/Aug/17 10:04
• Updated: 27/Feb/18 00:44

Description

Configured AuthenticationFilterInitializer and started a cluster. When accessing YARN UI using doAs, encountering following error.
URL : http://localhost:25005/cluster??doAs=guest

org.apache.hadoop.security.authentication.util.SignerException: Invalid signature
2017-08-01 15:34:22,163 ERROR org.apache.hadoop.yarn.webapp.Dispatcher: error handling URI: /cluster
java.lang.IllegalArgumentException: Null user
	at org.apache.hadoop.security.UserGroupInformation.createRemoteUser(UserGroupInformation.java:1499)
	at org.apache.hadoop.security.UserGroupInformation.createRemoteUser(UserGroupInformation.java:1486)
	at org.apache.hadoop.security.AuthenticationWithProxyUserFilter$1.getRemoteOrProxyUser(AuthenticationWithProxyUserFilter.java:82)
	at org.apache.hadoop.security.AuthenticationWithProxyUserFilter$1.getRemoteUser(AuthenticationWithProxyUserFilter.java:92)
	at javax.servlet.http.HttpServletRequestWrapper.getRemoteUser(HttpServletRequestWrapper.java:207)
	at javax.servlet.http.HttpServletRequestWrapper.getRemoteUser(HttpServletRequestWrapper.java:207)
	at org.apache.hadoop.yarn.webapp.view.HeaderBlock.render(HeaderBlock.java:28)
	at org.apache.hadoop.yarn.webapp.view.HtmlBlock.render(HtmlBlock.java:69)
	at org.apache.hadoop.yarn.webapp.view.HtmlBlock.renderPartial(HtmlBlock.java:79)
	at org.apache.hadoop.yarn.webapp.View.render(View.java:235)
	at org.apache.hadoop.yarn.webapp.view.HtmlPage$Page.subView(HtmlPage.java:49)
	at org.apache.hadoop.yarn.webapp.hamlet2.HamletImpl$EImp._v(HamletImpl.java:117)
	at org.apache.hadoop.yarn.webapp.hamlet2.Hamlet$TD.__(Hamlet.java:848)
	at org.apache.hadoop.yarn.webapp.view.TwoColumnLayout.render(TwoColumnLayout.java:61)
	at org.apache.hadoop.yarn.webapp.view.HtmlPage.render(HtmlPage.java:82)
	at org.apache.hadoop.yarn.webapp.Dispatcher.render(Dispatcher.java:206)
	at org.apache.hadoop.yarn.webapp.Dispatcher.service(Dispatcher.java:165)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
	at com.google.inject.servlet.ServletDefinition.doServiceImpl(ServletDefinition.java:287)
	at com.google.inject.servlet.ServletDefinition.doService(ServletDefinition.java:277)

Issue Links

• is broken by: HADOOP-13119 Add ability to secure log servlet using proxy users