[SLIDER-1010] SliderAM rejecting launch in a secure cluster —claims user not on a keytab

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Slider 0.81
• Fix Version/s: Slider 0.90.2
• Component/s: appmaster, security

Environment

kerberos

• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 03/Dec/15 12:20
• Updated: 20/Jan/16 21:41
• Resolved: 09/Dec/15 17:47

Description

Am failing to launch in a secure cluster

2015-12-02 21:08:21,791 [main] INFO  security.UserGroupInformation - Login successful for user <omitted> using keytab file /grid/5/tmp/yarn-local/usercache/bigml/appcache/application_1447892961767_1838814/container_e02_1447892961767_1838814_02_000001/keytabs/headless.keytab
2015-12-02 21:08:21,791 [main] ERROR main.ServiceLauncher - User is not based on a keytab in a secure deployment.

This looks like the keytab checking code isn't working

Issue Links

• is duplicated by: SLIDER-990 The isFromKeytab check is not always valid
• relates to: SLIDER-1067 backport SLIDER-1010 to branch-0.8
• relates to: HADOOP-10786 Fix UGI#reloginFromKeytab on Java 8