[SLIDER-1026] AM can't make YarnClient calls on a secure cluster

• Type: Sub-task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: Slider 0.90.2
• Fix Version/s: Slider 0.91
• Component/s: appmaster

Environment

Kerberos

• Sprint: Slider September #1
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 15/Dec/15 11:55
• Updated: 03/Feb/16 21:51
• Resolved: 03/Feb/16 21:40

Description

YarnClient requests made by the AM fail as it's not authenticating with the RM properly. They need to be executed as the user who provided the token to the AM

(note that the yarn client calls are only made at startup; token expiry is not a problem here)

Issue Links

• is duplicated by: SLIDER-1050 Slider AM with incorrect keytab doesn't die as fast as it should
• is related to: HADOOP-12697 IPC retry policies should recognise that SASL auth failures are unrecoverable