You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Wilfred Spiegelenburg (JIRA)" <ji...@apache.org> on 2018/10/11 12:15:00 UTC
[jira] [Commented] (YARN-8864) NM incorrectly logs container user
as the user who sent a stop container request in its audit log
[ https://issues.apache.org/jira/browse/YARN-8864?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16646360#comment-16646360 ]
Wilfred Spiegelenburg commented on YARN-8864:
---------------------------------------------
[~haibochen] If I understand you correctly we should be logging the remote user and not the container user in the audit message.
I looked at the other messages that we log in the {{ContainerManagerImpl}}. We use an "unknown user" when we authorise, I think in both cases we should use the remote user from the remote UGI constructed.
I'll add a patch when I have finished the test runs
> NM incorrectly logs container user as the user who sent a stop container request in its audit log
> -------------------------------------------------------------------------------------------------
>
> Key: YARN-8864
> URL: https://issues.apache.org/jira/browse/YARN-8864
> Project: Hadoop YARN
> Issue Type: Bug
> Components: nodemanager
> Affects Versions: 3.2.0
> Reporter: Haibo Chen
> Assignee: Wilfred Spiegelenburg
> Priority: Major
>
> As in ContainerManagerImpl.java
> {code:java}
> protected void stopContainerInternal(ContainerId containerID)
> throws YarnException, IOException {
> ...
> NMAuditLogger.logSuccess(container.getUser(), AuditConstants.STOP_CONTAINER,
> "ContainerManageImpl", containerID.getApplicationAttemptId().getApplicationId(), containerID);
> }{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org