Hadoop Map/Reduce
  1. Hadoop Map/Reduce
  2. MAPREDUCE-3101 Security issues in YARN
  3. MAPREDUCE-3127

Unable to restrict users based on resourcemanager.admin.acls value set

    Details

    • Type: Sub-task Sub-task
    • Status: Closed
    • Priority: Blocker Blocker
    • Resolution: Fixed
    • Affects Version/s: 0.23.0
    • Fix Version/s: 0.23.0
    • Component/s: mrv2, resourcemanager
    • Labels:
      None

      Description

      Setting the following property in yarn-site.xml with user ids to restrict ability to run
      'rmadmin -refreshQueues is not honoured

      <property>
      <name>yarn.server.resourcemanager.admin.acls</name>
      <value>hadoop1</value>
      <description></description>
      <final></final>
      </property>

      Should it be the same for rmadmin -refreshNodes?

      1. MAPREDUCE-3101.patch
        4 kB
        Arun C Murthy
      2. MAPREDUCE-3101.patch
        3 kB
        Arun C Murthy
      3. MAPREDUCE-3101.patch
        2 kB
        Arun C Murthy

        Activity

        Hide
        Arun C Murthy added a comment -

        I bet acls were disabled, with it enabled it works fine.

        I've changed default to true and with default acl of * it should be fine. Also updated docs.

        No code changes.

        Show
        Arun C Murthy added a comment - I bet acls were disabled, with it enabled it works fine. I've changed default to true and with default acl of * it should be fine. Also updated docs. No code changes.
        Hide
        Arun C Murthy added a comment -

        Need to add --no-prefix

        Show
        Arun C Murthy added a comment - Need to add --no-prefix
        Hide
        Arun C Murthy added a comment -

        Fixed the patch.

        Show
        Arun C Murthy added a comment - Fixed the patch.
        Hide
        Hadoop QA added a comment -

        -1 overall. Here are the results of testing the latest attachment
        http://issues.apache.org/jira/secure/attachment/12499244/MAPREDUCE-3101.patch
        against trunk revision .

        +1 @author. The patch does not contain any @author tags.

        -1 tests included. The patch doesn't appear to include any new or modified tests.
        Please justify why no new tests are needed for this patch.
        Also please list what manual steps were performed to verify this patch.

        +1 javadoc. The javadoc tool did not generate any warning messages.

        +1 javac. The applied patch does not increase the total number of javac compiler warnings.

        +1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.

        +1 release audit. The applied patch does not increase the total number of release audit warnings.

        +1 core tests. The patch passed unit tests in .

        +1 contrib tests. The patch passed contrib unit tests.

        Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//testReport/
        Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//console

        This message is automatically generated.

        Show
        Hadoop QA added a comment - -1 overall. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12499244/MAPREDUCE-3101.patch against trunk revision . +1 @author. The patch does not contain any @author tags. -1 tests included. The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 javadoc. The javadoc tool did not generate any warning messages. +1 javac. The applied patch does not increase the total number of javac compiler warnings. +1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings. +1 release audit. The applied patch does not increase the total number of release audit warnings. +1 core tests. The patch passed unit tests in . +1 contrib tests. The patch passed contrib unit tests. Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//testReport/ Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//console This message is automatically generated.
        Hide
        Arun C Murthy added a comment -

        Minor update: added docs for admin/webapp ports of RM.

        Show
        Arun C Murthy added a comment - Minor update: added docs for admin/webapp ports of RM.
        Hide
        Arun C Murthy added a comment -

        I just committed this since it was just a change to config/docs.

        Show
        Arun C Murthy added a comment - I just committed this since it was just a change to config/docs.
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-trunk-Commit #1093 (See https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1093/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Common-trunk-Commit #1093 (See https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1093/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-0.23-Commit #11 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/11/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-0.23-Commit #11 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/11/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-0.23-Commit #10 (See https://builds.apache.org/job/Hadoop-Common-0.23-Commit/10/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Common-0.23-Commit #10 (See https://builds.apache.org/job/Hadoop-Common-0.23-Commit/10/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-trunk-Commit #1172 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1172/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-trunk-Commit #1172 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1172/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-0.23-Commit #12 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/12/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-0.23-Commit #12 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/12/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-trunk-Commit #1112 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1112/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-trunk-Commit #1112 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1112/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-0.23-Build #42 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/42/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-0.23-Build #42 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/42/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-trunk #863 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk/863/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-trunk #863 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk/863/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-0.23-Build #54 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/54/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-0.23-Build #54 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/54/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-trunk #833 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk/833/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-trunk #833 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk/833/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt

          People

          • Assignee:
            Arun C Murthy
            Reporter:
            Amol Kekre
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development