[
https://issues.apache.org/jira/browse/SLIDER-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15037728#comment-15037728
]
Steve Loughran commented on SLIDER-1010:
----------------------------------------
Keytab flag being set in UGI ctor. From trunk:
{code}
UserGroupInformation(Subject subject) {
this.subject = subject;
this.user = subject.getPrincipals(User.class).iterator().next();
this.isKeytab = !subject.getPrivateCredentials(KeyTab.class).isEmpty();
** HERE **
this.isKrbTkt =
!subject.getPrivateCredentials(KerberosTicket.class).isEmpty();
}
{code}
that line was changed to HADOOP-10786
> SliderAM rejecting launch in a secure cluster -claims user not on a keytab
> --------------------------------------------------------------------------
>
> Key: SLIDER-1010
> URL: https://issues.apache.org/jira/browse/SLIDER-1010
> Project: Slider
> Issue Type: Bug
> Components: appmaster
> Affects Versions: Slider 0.81
> Reporter: Steve Loughran
>
> Am failing to launch in a secure cluster
> {code}
> 2015-12-02 21:08:21,791 [main] INFO security.UserGroupInformation - Login
> successful for user <omitted> using keytab file
> /grid/5/tmp/yarn-local/usercache/bigml/appcache/application_1447892961767_1838814/container_e02_1447892961767_1838814_02_000001/keytabs/headless.keytab
> 2015-12-02 21:08:21,791 [main] ERROR main.ServiceLauncher - User is not based
> on a keytab in a secure deployment.
> {code}
> This looks like the keytab checking code isn't working
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
