[YARN-4430] registry security validation can fail when downgrading to insecure would work

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.7.1
• Component/s: yarn

Environment

Kerberos, java 7 & 8

• Assignee: Unassigned
• Reporter: Steve Loughran
• Created: 07/Dec/15 17:03
• Updated: 06/Mar/19 21:17

Description

The Registry ZK client code does a pre-emptive validation of registry security settings, in the interest of being helpful when things fail.

But: sometimes it fails fast (see stack trace in SLIDER-993) when it could just warn and continue -because if the registry is only being read, skipping SASL auth works

Issue Links

• links to: GitHub Pull Request #61