[
https://issues.apache.org/jira/browse/YARN-248?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13506574#comment-13506574
]
Tom White commented on YARN-248:
--------------------------------
I thought about it more, and delegation tokens from the job's credentials are
written to the job submit directory in a file called appTokens. This is
MR-specific, however, so we can't use it from YARN, which means ii) isn't
appropriate.
This issue affects JT job recovery too (see MAPREDUCE-4830).
> Restore RMDelegationTokenSecretManager state on restart
> -------------------------------------------------------
>
> Key: YARN-248
> URL: https://issues.apache.org/jira/browse/YARN-248
> Project: Hadoop YARN
> Issue Type: Sub-task
> Components: resourcemanager
> Reporter: Tom White
>
> On restart, the RM creates a new RMDelegationTokenSecretManager with fresh
> state. This will cause problems for Oozie jobs running on secure clusters
> since the delegation tokens stored in the job credentials (used by the Oozie
> launcher job to submit a job to the RM) will not be recognized by the RM, and
> recovery will fail.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
