[YARN-2715] Proxy user is problem for RPC interface if yarn.resourcemanager.webapp.proxyuser is not set.

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: resourcemanager
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Zhijie Shen
• Reporter: Zhijie Shen
• Created: 20/Oct/14 21:08
• Updated: 01/Dec/14 03:08
• Resolved: 22/Oct/14 03:12

Description

After YARN-2656, if people set hadoop.proxyuser for the client<-->RM RPC interface, it's not going to work, because ProxyUsers#sip is a singleton per daemon. After YARN-2656, RM has both channels that want to set this configuration: RPC and HTTP. RPC interface sets it first by reading hadoop.proxyuser, but it is overwritten by HTTP interface, who sets it to empty because yarn.resourcemanager.webapp.proxyuser doesn't exist.

The fix for it could be similar to what we've done for YARN-2676: make the HTTP interface anyway source hadoop.proxyuser first, then yarn.resourcemanager.webapp.proxyuser.

Issue Links

• is broken by: YARN-2656 RM web services authentication filter should add support for proxy user