[jira] [Created] (YARN-2449) Timelineserver returns invalid Delegation token in secure kerberos enabled cluster when hadoop.http.filter.initializers are not set

["Karam Singh (JIRA)" <ji...@apache.org>]

Karam Singh created YARN-2449:
---------------------------------

             Summary: Timelineserver returns invalid Delegation token in secure kerberos enabled cluster when hadoop.http.filter.initializers are not set
                 Key: YARN-2449
                 URL: https://issues.apache.org/jira/browse/YARN-2449
             Project: Hadoop YARN
          Issue Type: Bug
          Components: timelineserver
    Affects Versions: 2.6.0
         Environment: Deploy security enabled cluster is ATS also enabled and running, but no hadoop.http.filter.initializers set in core-site.xml
            Reporter: Karam Singh


Timelineserver returns invalid Delegation token in secure kerberos enabled cluster when hadoop.http.filter.initializers are not set
Looks in it is regression from YARN-2397
After YARN-2397. when no hadoop.http.filter.initializers is set

Now when try fetch DELEGATION token from ATS, it returns invalid token
Tried to fetch timeline delegation by using curl commands :
{code}
1. curl -i -k -s -b '/grid/0/hadoopqe/y6/YarnWSAPISubmitAppKillApp/timeline-cookie.txt' 'http://atshost:8188/ws/v1/timeline?op=GETDELEGATIONTOKEN&renewer=hrt_qa'
Or
2. curl -i -k -s --negotiate -u : 'http://atshost:8188/ws/v1/timeline?op=GETDELEGATIONTOKEN&renewer=test_user'
{code}
Return response is for both queries: 
{code}
{"About":"Timeline API"}
{code}
Whereas before YARN-2397 or if you set hadoop.http.filter.initializers = TimelineAuthenticationFilterInitializer or AuthenticationFilterInitializer
First query returns DT and Second used to fail



--
This message was sent by Atlassian JIRA
(v6.2#6252)