[YARN-7702] RM fail to transition to ACTIVE in secure cluster

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Duplicate
• Component/s: resourcemanager
• Assignee: Unassigned
• Reporter: Rohith Sharma K S
• Created: 04/Jan/18 18:47
• Updated: 04/Jan/18 18:57
• Resolved: 04/Jan/18 18:48

Description

Both RM were running perfectly fine for many days and switched multiple times. At some point of time when RM is switched from ACTIVE -> STANDBY, UGI information got either changed or to subject new user got added.
As a result UGI#getShortUserName() is returning wrong user which result in fail to transition to ACTIVE with AccessControlException!

Caused by: org.apache.hadoop.security.AccessControlException: User odsuser doesn't have permission to call 'refreshAdminAcls' 

odsuser user is application submitted user.

Issue Links

• is duplicated by: YARN-7701 Both RM are in standby in secure cluster