[
https://issues.apache.org/jira/browse/FLINK-5580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15831995#comment-15831995
]
Tzu-Li (Gordon) Tai commented on FLINK-5580:
--------------------------------------------
Resolved for master with 640a149ea69c0fc2314c6d5b422500c6c9587f43.
Resolved for 1.2 with 5cbaf796d2e40db26ccdcfc458f5f1baf0230bb6.
> Kerberos keytabs not working for YARN deployment mode
> -----------------------------------------------------
>
> Key: FLINK-5580
> URL: https://issues.apache.org/jira/browse/FLINK-5580
> Project: Flink
> Issue Type: Bug
> Components: Security, YARN
> Reporter: Tzu-Li (Gordon) Tai
> Assignee: Tzu-Li (Gordon) Tai
> Priority: Critical
> Fix For: 1.2.0
>
>
> Setup: Kerberos security using keytabs, Flink session on YARN deployment (in
> standalone, it works fine without problems).
> I’m getting these error messages in the YARN node managers, causing the
> TaskManager containers to fail to start properly:
> {{org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
> as:tzulitai (auth:SIMPLE)
> cause:org.apache.hadoop.security.AccessControlException: Client cannot
> authenticate via:[TOKEN, KERBEROS]}}
> The security configuration for Hadoop has been set to "kerberos", to the
> "auto: SIMPLE" seems very strange. It also seems as if credential tokens has
> not been properly set for the {{ContainerLaunchContext}} s, which may be an
> issue causing this.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
