You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Eric Yang (JIRA)" <ji...@apache.org> on 2018/07/04 15:09:00 UTC
[jira] [Commented] (YARN-8474) sleeper service fails to launch with
"Authentication Required"
[ https://issues.apache.org/jira/browse/YARN-8474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16532857#comment-16532857 ]
Eric Yang commented on YARN-8474:
---------------------------------
By default follow redirect option is turned on for Jersey. This can cause getRMWebAddress method to return stand-by RM web address and forwarding standby Kerberos challenge to active RM to cause error message like:
{code:java}
HTTP/1.1 403 GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96){code}
By disabling follow redirect, and send unique kerberos challenge. Patch 004 resolved the root cause of the problem.
> sleeper service fails to launch with "Authentication Required"
> --------------------------------------------------------------
>
> Key: YARN-8474
> URL: https://issues.apache.org/jira/browse/YARN-8474
> Project: Hadoop YARN
> Issue Type: Bug
> Components: yarn
> Affects Versions: 3.1.0
> Reporter: Sumana Sathish
> Assignee: Eric Yang
> Priority: Critical
> Attachments: YARN-8474.001.patch, YARN-8474.002.patch, YARN-8474.003.patch, YARN-8474.004.patch
>
>
> Sleeper job fails with Authentication required.
> {code}
> yarn app -launch sl1 a/YarnServiceLogs/sleeper-orig.json
> 18/06/28 22:00:43 INFO client.ApiServiceClient: Loading service definition from local FS: /a/YarnServiceLogs/sleeper-orig.json
> 18/06/28 22:00:44 ERROR client.ApiServiceClient: Authentication required
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org