[YARN-9735] Allow User Keytab to submit YARN Native Service

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 3.2.0
• Component/s: yarn-native-services
• Assignee: Prabhu Joseph
• Reporter: Prabhu Joseph
• Created: 09/Aug/19 20:25
• Updated: 23/Oct/19 16:15
• Resolved: 14/Aug/19 17:49

Description

Yarn Native Service launch fails on a secure cluster with user keytab. It allows only service keytab. Have seen most of the users test their jobs with user keytab.

[ambari-qa@pjosephdocker-3 ~]$ yarn app -launch sleeper-service /usr/hdp/3.0.1.0-187/hadoop-yarn/yarn-service-examples/sleeper/sleeper.json
19/08/03 17:17:04 ERROR client.ApiServiceClient: Kerberos principal ([e-mail]) does  not contain a hostname.