Hadoop Map/Reduce
  1. Hadoop Map/Reduce
  2. MAPREDUCE-3101 Security issues in YARN
  3. MAPREDUCE-3127

Unable to restrict users based on resourcemanager.admin.acls value set

    Details

    • Type: Sub-task Sub-task
    • Status: Closed
    • Priority: Blocker Blocker
    • Resolution: Fixed
    • Affects Version/s: 0.23.0
    • Fix Version/s: 0.23.0
    • Component/s: mrv2, resourcemanager
    • Labels:
      None

      Description

      Setting the following property in yarn-site.xml with user ids to restrict ability to run
      'rmadmin -refreshQueues is not honoured

      <property>
      <name>yarn.server.resourcemanager.admin.acls</name>
      <value>hadoop1</value>
      <description></description>
      <final></final>
      </property>

      Should it be the same for rmadmin -refreshNodes?

      1. MAPREDUCE-3101.patch
        2 kB
        Arun C Murthy
      2. MAPREDUCE-3101.patch
        3 kB
        Arun C Murthy
      3. MAPREDUCE-3101.patch
        4 kB
        Arun C Murthy

        Activity

        Arun C Murthy made changes -
        Status Resolved [ 5 ] Closed [ 6 ]
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-trunk #833 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk/833/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-trunk #833 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk/833/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-0.23-Build #54 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/54/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-0.23-Build #54 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/54/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-trunk #863 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk/863/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-trunk #863 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk/863/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-0.23-Build #42 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/42/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-0.23-Build #42 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/42/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-trunk-Commit #1112 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1112/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-trunk-Commit #1112 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1112/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-0.23-Commit #12 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/12/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-0.23-Commit #12 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/12/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-trunk-Commit #1172 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1172/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-trunk-Commit #1172 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1172/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-0.23-Commit #10 (See https://builds.apache.org/job/Hadoop-Common-0.23-Commit/10/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Common-0.23-Commit #10 (See https://builds.apache.org/job/Hadoop-Common-0.23-Commit/10/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-0.23-Commit #11 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/11/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-0.23-Commit #11 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/11/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184993 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-trunk-Commit #1093 (See https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1093/)
        MAPREDUCE-3127. Fixed CHANGES.txt to reflect correct jira.

        acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Show
        Hudson added a comment - Integrated in Hadoop-Common-trunk-Commit #1093 (See https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1093/ ) MAPREDUCE-3127 . Fixed CHANGES.txt to reflect correct jira. acmurthy : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1184992 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        Arun C Murthy made changes -
        Status Patch Available [ 10002 ] Resolved [ 5 ]
        Resolution Fixed [ 1 ]
        Hide
        Arun C Murthy added a comment -

        I just committed this since it was just a change to config/docs.

        Show
        Arun C Murthy added a comment - I just committed this since it was just a change to config/docs.
        Arun C Murthy made changes -
        Attachment MAPREDUCE-3101.patch [ 12499251 ]
        Hide
        Arun C Murthy added a comment -

        Minor update: added docs for admin/webapp ports of RM.

        Show
        Arun C Murthy added a comment - Minor update: added docs for admin/webapp ports of RM.
        Hide
        Hadoop QA added a comment -

        -1 overall. Here are the results of testing the latest attachment
        http://issues.apache.org/jira/secure/attachment/12499244/MAPREDUCE-3101.patch
        against trunk revision .

        +1 @author. The patch does not contain any @author tags.

        -1 tests included. The patch doesn't appear to include any new or modified tests.
        Please justify why no new tests are needed for this patch.
        Also please list what manual steps were performed to verify this patch.

        +1 javadoc. The javadoc tool did not generate any warning messages.

        +1 javac. The applied patch does not increase the total number of javac compiler warnings.

        +1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.

        +1 release audit. The applied patch does not increase the total number of release audit warnings.

        +1 core tests. The patch passed unit tests in .

        +1 contrib tests. The patch passed contrib unit tests.

        Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//testReport/
        Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//console

        This message is automatically generated.

        Show
        Hadoop QA added a comment - -1 overall. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12499244/MAPREDUCE-3101.patch against trunk revision . +1 @author. The patch does not contain any @author tags. -1 tests included. The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 javadoc. The javadoc tool did not generate any warning messages. +1 javac. The applied patch does not increase the total number of javac compiler warnings. +1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings. +1 release audit. The applied patch does not increase the total number of release audit warnings. +1 core tests. The patch passed unit tests in . +1 contrib tests. The patch passed contrib unit tests. Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//testReport/ Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1036//console This message is automatically generated.
        Arun C Murthy made changes -
        Status Open [ 1 ] Patch Available [ 10002 ]
        Arun C Murthy made changes -
        Attachment MAPREDUCE-3101.patch [ 12499244 ]
        Hide
        Arun C Murthy added a comment -

        Fixed the patch.

        Show
        Arun C Murthy added a comment - Fixed the patch.
        Arun C Murthy made changes -
        Status Patch Available [ 10002 ] Open [ 1 ]
        Hide
        Arun C Murthy added a comment -

        Need to add --no-prefix

        Show
        Arun C Murthy added a comment - Need to add --no-prefix
        Arun C Murthy made changes -
        Status Open [ 1 ] Patch Available [ 10002 ]
        Arun C Murthy made changes -
        Attachment MAPREDUCE-3101.patch [ 12499243 ]
        Hide
        Arun C Murthy added a comment -

        I bet acls were disabled, with it enabled it works fine.

        I've changed default to true and with default acl of * it should be fine. Also updated docs.

        No code changes.

        Show
        Arun C Murthy added a comment - I bet acls were disabled, with it enabled it works fine. I've changed default to true and with default acl of * it should be fine. Also updated docs. No code changes.
        Vinod Kumar Vavilapalli made changes -
        Parent MAPREDUCE-3101 [ 12524796 ]
        Issue Type Bug [ 1 ] Sub-task [ 7 ]
        Vinod Kumar Vavilapalli made changes -
        Fix Version/s 0.23.0 [ 12315570 ]
        Affects Version/s 0.23.0 [ 12315570 ]
        Component/s resourcemanager [ 12315340 ]
        Arun C Murthy made changes -
        Field Original Value New Value
        Assignee Arun C Murthy [ acmurthy ]
        Priority Major [ 3 ] Blocker [ 1 ]
        Amol Kekre created issue -

          People

          • Assignee:
            Arun C Murthy
            Reporter:
            Amol Kekre
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development