[jira] [Created] (DRILL-6983) PAM Auth Enabled on Drill-On-YARN only works on YARN user

["Michael Dennis Uanang (JIRA)" <ji...@apache.org>]

Michael Dennis Uanang created DRILL-6983:
--------------------------------------------

             Summary: PAM Auth Enabled on Drill-On-YARN only works on YARN user
                 Key: DRILL-6983
                 URL: https://issues.apache.org/jira/browse/DRILL-6983
             Project: Apache Drill
          Issue Type: Bug
          Components: Client - HTTP
    Affects Versions: 1.15.0, 1.14.0
            Reporter: Michael Dennis Uanang
         Attachments: Selection_999(203).png, Selection_999(204).png, Selection_999(205).png

Hi,

I'm having problem running Drill-on-YARN with PAM authentication enabled. PAM auth is working, BUT only accepting login via WEBUI for YARN user.

_drill-override.conf_

{{drill.exec: {}}
{{ cluster-id: "drillbits2"}}
{{ zk.connect: "app40:2181,app41:2181,app42:2181",}}
{{ impersonation: {}}
{{ enabled: true,}}
{{ },}}
{{ security: {}}
{{ auth.mechanisms: [ "PLAIN" ],}}
{{ user.auth.enabled: true,}}
{{ user.auth.packages += "org.apache.drill.exec.rpc.user.security",}}
{{ user.auth.impl: "pam",}}
{{ user.auth.pam_profiles: [ "login", "sshd" ]}}
{{ }}}
{{}}}

 

SEE errors below:

!Selection_999(204).png!

!Selection_999(204).png!

As you can see from the screenshot, when trying to login via WEBUI using infra or drill user, I'm having error 'password check failed for user (USER)`. But you'll also notice that it's giving me authentication failure for UID=1018 which is YARN 

!Selection_999(205).png!

 

Please help me to right direction or if I'm missing something.

Thank you.

 

MD

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)