[ https://issues.apache.org/jira/browse/DRILL-6983?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16752010#comment-16752010 ]
Sorabh Hamirwasia commented on DRILL-6983: ------------------------------------------ Can you please check if you have followed all the steps from here [1] like making Drill process user part of shadow group, etc Also the recommended pam module to use will be libpam4j [2] instead of jpam. So please try using it and see if it makes any difference. [1]: https://drill.apache.org/docs/configuring-plain-security/ [2]: https://drill.apache.org/docs/using-libpam4j-as-the-pam-authenticator/ > PAM Auth Enabled on Drill-On-YARN only works on YARN user > --------------------------------------------------------- > > Key: DRILL-6983 > URL: https://issues.apache.org/jira/browse/DRILL-6983 > Project: Apache Drill > Issue Type: Bug > Components: Client - HTTP > Affects Versions: 1.14.0, 1.15.0 > Reporter: Michael Dennis Uanang > Priority: Major > Attachments: Selection_999(203).png, Selection_999(204).png, > Selection_999(205).png > > > Hi, > I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM > auth is working, BUT only accepting login via WEBUI for YARN user. > _drill-override.conf_ > > {code:java} > drill.exec: { > cluster-id: "drillbits2", > zk.connect: "app40:2181,app41:2181,app42:2181", > impersonation: { > enabled: true > }, > security: { > auth.mechanisms: [ "PLAIN" ], > user.auth.enabled: true, > user.auth.packages += "org.apache.drill.exec.rpc.user.security", > user.auth.impl: "pam", > user.auth.pam_profiles: [ "login", "sshd" ] > } > } > {code} > > > SEE errors below: > !Selection_999(204).png! > > !Selection_999(203).png! > As you can see from the screenshot, when trying to login via WEBUI using > infra or drill user, I'm having error 'password check failed for user > (USER)`. But you'll also notice that it's giving me authentication failure > for UID=1018 which is YARN > !Selection_999(205).png! > > Please help me to right direction or if I'm missing something. > Thank you. > > MD > -- This message was sent by Atlassian JIRA (v7.6.3#76005)