The RM web interface sometimes returns a request is a replay error if the default kerberos http filter is enabled. This is because it uses the new RMAuthenticationFilter in addition to the AuthenticationFilter. There is a workaround to set "yarn.resourcemanager.webapp.delegation-token-auth-filter.enabled" to false. This bug is to fix the code to use only the RMAuthenticationFilter and not both.
The similar problem happens to the timeline server web interface as well.