[ 
https://issues.apache.org/jira/browse/MAPREDUCE-3380?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13148201#comment-13148201
 ] 

Alejandro Abdelnur commented on MAPREDUCE-3380:
-----------------------------------------------

@Mahadev, the user running the Oozie server (unix UID for Pseudo auth, kerberos 
principal for Kerberos auth) is configured in Hadoop as a proxyuser. Then, 
users submit jobs to Oozie and Oozie does the corresponding doAs.


                
> Token infrastructure for running clients which are not kerberos authenticated
> -----------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-3380
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-3380
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: mr-am
>    Affects Versions: 0.23.0
>            Reporter: Alejandro Abdelnur
>            Priority: Blocker
>             Fix For: 0.23.1
>
>         Attachments: MAPREDUCE-3380.branch-0.23.patch, 
> MAPREDUCE-3380.branch-0.23.patch
>
>
> The JobClient.getDelegationToken() method is returning NULL, this makes Oozie 
> fail when trying to get the delegation token to use it for starting a job.
> What is seems to be happing is that Jobclient.getDelegationToken() calls 
> Cluster.getDelegationToken() that calls YarnRunner.getDelegationToken() that 
> calls ResourceMgrDelegate.getDelegationToken(). And the last one is not 
> implemented. (Thanks Ahmed for tracing this in MR2 code)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to