You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Naganarasimha G R (JIRA)" <ji...@apache.org> on 2017/07/02 17:54:03 UTC

[jira] [Comment Edited] (YARN-6760) ZKRMStateStore.constructZkRootNodeACL seems to not set acls as desired

    [ https://issues.apache.org/jira/browse/YARN-6760?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16071738#comment-16071738 ] 

Naganarasimha G R edited comment on YARN-6760 at 7/2/17 5:54 PM:
-----------------------------------------------------------------

[~kasha]/[~rkanter]. 
Just wanted to understand why for ZkRootNodeACL is only set with removing CREATE_DELETE_PERMS ? And also if Authentication is done through Kerberos would it be useful to add acl for md5 in {{constructZkRootNodeACL}} ?


was (Author: naganarasimha):
[~kasha]/[~rkanter]. 
Just wanted to understand why for ZkRootNodeACL is only set with removing CREATE_DELETE_PERMS ? And also if Authentication is done through Kerberos would it make sense to add acl for md5 in {{constructZkRootNodeACL}} ?

> ZKRMStateStore.constructZkRootNodeACL seems to not set acls as desired
> ----------------------------------------------------------------------
>
>                 Key: YARN-6760
>                 URL: https://issues.apache.org/jira/browse/YARN-6760
>             Project: Hadoop YARN
>          Issue Type: Bug
>            Reporter: Naganarasimha G R
>            Assignee: Naganarasimha G R
>
> {{ZKUtil.removeSpecificPerms}} doesn't remove the CREATE_DELETE_PERMS when {{yarn.resourcemanager.zk-acl}} is configured to {{world:anyone:r}}. Its getting set to {{world:anyone:rcd}}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org