And now I feel like a complete idiot because my actual problem was the fact that in Ranger policies I wrote "test" instead of "root.test". Sorry for the spam, then.
Regards, Loïc Loïc CHANEL System Big Data engineer MS&T - WASABI - Worldline (Villeurbanne, France) 2016-09-06 11:22 GMT+02:00 Loïc Chanel <loic.cha...@telecomnancy.net>: > Actually, I ran some further tests and the property > ranger.add-yarn-authorization > set to false in ranger-yarn-security seems to prevent anyone to run jobs in > any queue as my user "test" cannot submit a job into "test" queue according > to YARN. > Anyone encountered the same issue ? > > FYI, I am using an HDP 2.4 stack. > > Regards, > > > Loïc > > Loïc CHANEL > System Big Data engineer > MS&T - WASABI - Worldline (Villeurbanne, France) > > 2016-09-06 10:31 GMT+02:00 Loïc Chanel <loic.cha...@telecomnancy.net>: > >> Hi all, >> >> I'm back on the Hadoop & Multi-tenancy topic and as I ran some tests I >> quite a big issue. >> Using Ranger to handle which user can submit job to which queue I >> authorized user "test" to submit jobs on queue "test" only - with the >> property ranger.add-yarn-authorization set to false in ranger-yarn-security. >> But even with these settings when user "test" submit a job it goes in the >> "default" queue - to which he shouldn't be able to submit jobs. >> >> Do you see what I miss here ? >> If not, do anyone knows how to turn on YARN Ranger plugin debug logs ? >> >> Thanks in advance for your inputs, >> >> >> Loïc >> >> Loïc CHANEL >> System Big Data engineer >> MS&T - WASABI - Worldline (Villeurbanne, France) >> > >
