Re: Kerberised JobHistory Server not starting: User jhs trying to create the /mr-history/done directory

2017-08-06 Thread Kevin Buckley
On 25 July 2017 at 03:21, Erik Krogen wrote: > Hey Kevin, > > Sorry, I missed your point about using auth_to_local. You're right that you > should be able to use that for what you're trying to achieve. I think it's > just that your rule is wrong; I believe it should be: >

Re: Kerberised JobHistory Server not starting: User jhs trying to create the /mr-history/done directory

2017-07-24 Thread Erik Krogen
Hey Kevin, Sorry, I missed your point about using auth_to_local. You're right that you should be able to use that for what you're trying to achieve. I think it's just that your rule is wrong; I believe it should be: RULE:[2:$1@$0](jhs/.*@ECS.VUW.AC.NZ)s/.*/mapred/ HTH Erik On 7/23/17,

Re: Kerberised JobHistory Server not starting: User jhs trying to create the /mr-history/done directory

2017-07-23 Thread Kevin Buckley
On 21 July 2017 at 13:25, Kevin Buckley wrote: > On 21 July 2017 at 04:04, Erik Krogen wrote: >> Hi Kevin, >> >> Since you are using the "jhs" keytab with principal "jhs/_h...@realm.tld", >> the JHS is authenticating itself as the jhs

Re: Kerberised JobHistory Server not starting: User jhs trying to create the /mr-history/done directory

2017-07-20 Thread Kevin Buckley
On 21 July 2017 at 04:04, Erik Krogen wrote: > Hi Kevin, > > Since you are using the "jhs" keytab with principal "jhs/_h...@realm.tld", > the JHS is authenticating itself as the jhs user (which is the actual > important part, rather than the user the process is running as).

Re: Kerberised JobHistory Server not starting: User jhs trying to create the /mr-history/done directory

2017-07-20 Thread Erik Krogen
Hi Kevin, Since you are using the "jhs" keytab with principal "jhs/_h...@realm.tld", the JHS is authenticating itself as the jhs user (which is the actual important part, rather than the user the process is running as). If you want it to be the "mapred" user, you should change the