[
https://issues.apache.org/jira/browse/DRILL-6983?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Dennis Uanang updated DRILL-6983:
-----------------------------------------
Description:
Hi,
I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM
auth is working, BUT only accepting login via WEBUI for YARN user.
_drill-override.conf_
{code:java}
drill.exec: {
cluster-id: "drillbits2",
zk.connect: "app40:2181,app41:2181,app42:2181",
impersonation: {
enabled: true
},
security: {
auth.mechanisms: [ "PLAIN" ],
user.auth.enabled: true,
user.auth.packages += "org.apache.drill.exec.rpc.user.security",
user.auth.impl: "pam",
user.auth.pam_profiles: [ "login", "sshd" ]
}
}
{code}
SEE errors below:
!Selection_999(204).png!
!Selection_999(203).png!
As you can see from the screenshot, when trying to login via WEBUI using infra
or drill user, I'm having error 'password check failed for user (USER)`. But
you'll also notice that it's giving me authentication failure for UID=1018
which is YARN
!Selection_999(205).png!
Please help me to right direction or if I'm missing something.
Thank you.
MD
was:
Hi,
I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM
auth is working, BUT only accepting login via WEBUI for YARN user.
_drill-override.conf_
{{drill.exec: {}}
cluster-id: "drillbits2",
zk.connect: "app40:2181,app41:2181,app42:2181",
impersonation:
{ enabled: true, }
,
security:
{ auth.mechanisms: [ "PLAIN" ], user.auth.enabled: true, user.auth.packages +=
"org.apache.drill.exec.rpc.user.security", user.auth.impl: "pam",
user.auth.pam_profiles: [ "login", "sshd" ] }
{{}}}
SEE errors below:
!Selection_999(204).png!
!Selection_999(203).png!
As you can see from the screenshot, when trying to login via WEBUI using infra
or drill user, I'm having error 'password check failed for user (USER)`. But
you'll also notice that it's giving me authentication failure for UID=1018
which is YARN
!Selection_999(205).png!
Please help me to right direction or if I'm missing something.
Thank you.
MD
> PAM Auth Enabled on Drill-On-YARN only works on YARN user
> ---------------------------------------------------------
>
> Key: DRILL-6983
> URL: https://issues.apache.org/jira/browse/DRILL-6983
> Project: Apache Drill
> Issue Type: Bug
> Components: Client - HTTP
> Affects Versions: 1.14.0, 1.15.0
> Reporter: Michael Dennis Uanang
> Priority: Blocker
> Attachments: Selection_999(203).png, Selection_999(204).png,
> Selection_999(205).png
>
>
> Hi,
> I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM
> auth is working, BUT only accepting login via WEBUI for YARN user.
> _drill-override.conf_
>
> {code:java}
> drill.exec: {
> cluster-id: "drillbits2",
> zk.connect: "app40:2181,app41:2181,app42:2181",
> impersonation: {
> enabled: true
> },
> security: {
> auth.mechanisms: [ "PLAIN" ],
> user.auth.enabled: true,
> user.auth.packages += "org.apache.drill.exec.rpc.user.security",
> user.auth.impl: "pam",
> user.auth.pam_profiles: [ "login", "sshd" ]
> }
> }
> {code}
>
>
> SEE errors below:
> !Selection_999(204).png!
>
> !Selection_999(203).png!
> As you can see from the screenshot, when trying to login via WEBUI using
> infra or drill user, I'm having error 'password check failed for user
> (USER)`. But you'll also notice that it's giving me authentication failure
> for UID=1018 which is YARN
> !Selection_999(205).png!
>
> Please help me to right direction or if I'm missing something.
> Thank you.
>
> MD
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)