Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-4126

RM should not issue delegation tokens in unsecure mode

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.0.0-alpha1
    • Component/s: None
    • Labels:
      None
    • Hadoop Flags:
      Incompatible change, Reviewed
    • Release Note:
      Yarn now only issues and allows delegation tokens in secure clusters. Clients should no longer request delegation tokens in a non-secure cluster, or they'll receive an IOException.

      Description

      ClientRMService#getDelegationToken is currently returning a delegation token in insecure mode. We should not return the token if it's in insecure mode.

        Attachments

        1. 0001-YARN-4126.patch
          1.0 kB
          Bibin Chundatt
        2. 0002-YARN-4126.patch
          2 kB
          Bibin Chundatt
        3. 0003-YARN-4126.patch
          11 kB
          Bibin Chundatt
        4. 0004-YARN-4126.patch
          13 kB
          Bibin Chundatt
        5. 0005-YARN-4126.patch
          14 kB
          Bibin Chundatt
        6. 0006-YARN-4126.patch
          31 kB
          Bibin Chundatt

        Issue Links

        blocks

        Improvement - An improvement or enhancement to an existing feature or task. YARN-5882 Test only changes from YARN-4126

        • Major - Major loss of function.
        • Resolved
        breaks

        Bug - A problem which impairs or prevents the functions of the product. MAPREDUCE-6508 TestNetworkedJob fails consistently due to delegation token changes on RM.

        • Major - Major loss of function.
        • Resolved

        Improvement - An improvement or enhancement to an existing feature or task. YARN-5750 YARN-4126 broke Oozie on unsecure cluster

        • Major - Major loss of function.
        • Resolved

          Activity
          $i18n.getText('security.level.explanation', $currentSelection) Viewable by All Users
          Cancel

            People

            • Assignee:
              bibinchundatt Bibin Chundatt
              Reporter:
              jianhe Jian He

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment