Hadoop 2.8.0: Use of container-executor.cfg to restrict access to MapReduce jobs

2017-08-06 Thread Kevin Buckley
Hi again early on in my attempts to Kerberise our Hadoop instance, I had seen an error message that suggested I needed to add a list of users who could run jobs into the last line of Hadoop's container-executor.cfg for which the default content is yarn.nodemanager.linux-container-executor.group

Re: Hadoop 2.8.0: Use of container-executor.cfg to restrict access to MapReduce jobs

2017-08-07 Thread Varun Vasudev
Hi Kevin, The check that’s carried out is the following(pseudo-code) - If(user_id < min_user_id && user_not_in_allowed_system_users) { return “user banned”; } If(user_in_banned_users_list) { return “user banned”; } In your case, you can either bump up the min user id to a higher number and