Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-4629

Distributed shell breaks under strong security

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.7.1
    • 2.9.0, 3.0.0-alpha1
    • None
    • Secure cluster with the RM principal listed with a /_HOST entry to be expanded, most common with YARN HA enabled.

    Description

      If the auth_to_local is set to map requests from unknown hosts to nobody, the dist shell app fails. The reason is that the client doesn't translate the _HOST placeholder to the local hostname.

      Attachments

        1. YARN-4629.001.patch
          4 kB
          Daniel Templeton
        2. YARN-4629.002.patch
          5 kB
          Daniel Templeton
        3. YARN-4629.003.patch
          18 kB
          Daniel Templeton
        4. YARN-4629.004.patch
          19 kB
          Daniel Templeton

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            templedf Daniel Templeton
            templedf Daniel Templeton
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment