[ https://issues.apache.org/jira/browse/MAPREDUCE-3380?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13148201#comment-13148201 ]
Alejandro Abdelnur commented on MAPREDUCE-3380: ----------------------------------------------- @Mahadev, the user running the Oozie server (unix UID for Pseudo auth, kerberos principal for Kerberos auth) is configured in Hadoop as a proxyuser. Then, users submit jobs to Oozie and Oozie does the corresponding doAs. > Token infrastructure for running clients which are not kerberos authenticated > ----------------------------------------------------------------------------- > > Key: MAPREDUCE-3380 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-3380 > Project: Hadoop Map/Reduce > Issue Type: Sub-task > Components: mr-am > Affects Versions: 0.23.0 > Reporter: Alejandro Abdelnur > Priority: Blocker > Fix For: 0.23.1 > > Attachments: MAPREDUCE-3380.branch-0.23.patch, > MAPREDUCE-3380.branch-0.23.patch > > > The JobClient.getDelegationToken() method is returning NULL, this makes Oozie > fail when trying to get the delegation token to use it for starting a job. > What is seems to be happing is that Jobclient.getDelegationToken() calls > Cluster.getDelegationToken() that calls YarnRunner.getDelegationToken() that > calls ResourceMgrDelegate.getDelegationToken(). And the last one is not > implemented. (Thanks Ahmed for tracing this in MR2 code) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira