livy-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From srungarapu vamsi <>
Subject Impersonation Error
Date Mon, 20 Aug 2018 10:35:35 GMT

We have a secure kerberized CDH cluster.
I am trying to test impersonation through livy rest sever.
I have created the proxy user which can impersonate other users in the
while running the spark jobs.
Here is my core-site.xml for the proxy user "my_proxy_user":

    <name>hadoop.proxyuser. my_proxy_user.groups</name>
    <value> my_proxy_user_grp</value>
    <name>hadoop.proxyuser. my_proxy_user.users</name>

With these configurations, whenever i am trying to create a session or
batch, i am getting the following error.

org.apache.hadoop.yarn.exceptions.YarnException: User my_proxy_user
does not have privilage to see this attempt
	at org.apache.hadoop.yarn.server.resourcemanager.ClientRMService.getApplicationAttemptReport(
	at org.apache.hadoop.yarn.api.impl.pb.service.ApplicationClientProtocolPBServiceImpl.getApplicationAttemptReport(
	at org.apache.hadoop.yarn.proto.ApplicationClientProtocol$ApplicationClientProtocolService$2.callBlockingMethod(
	at org.apache.hadoop.ipc.ProtobufRpcEngine$Server$
	at org.apache.hadoop.ipc.RPC$
	at org.apache.hadoop.ipc.Server$Handler$
	at org.apache.hadoop.ipc.Server$Handler$
	at Method)
	at org.apache.hadoop.ipc.Server$

I am able to run the spark jobs by passsing the --proxyUser flag.
Also, i am successfully able to run yarn jobs with HADOOP_PROXY_USER.

But, on trying to create a session or batch, i am not getting in stderr of
the session/batch logs. But "Yarn Diagnostics" show the above error.

Can you please help me in solving this issue.

View raw message