[jira] [Created] (FLINK-5580) Kerberos keytabs not working for YARN deployment mode

["Tzu-Li (Gordon) Tai (JIRA)" <ji...@apache.org>]

Tzu-Li (Gordon) Tai created FLINK-5580:
------------------------------------------

             Summary: Kerberos keytabs not working for YARN deployment mode
                 Key: FLINK-5580
                 URL: https://issues.apache.org/jira/browse/FLINK-5580
             Project: Flink
          Issue Type: Bug
          Components: Security, YARN
            Reporter: Tzu-Li (Gordon) Tai
            Assignee: Tzu-Li (Gordon) Tai
            Priority: Critical
             Fix For: 1.2.0


Setup: Kerberos security using keytabs, Flink on YARN deployment (in standalone, it works fine without problems).

I’m getting these error messages in the YARN node managers, causing the TaskManager containers to fail to start properly:
{{org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:tzulitai (auth:SIMPLE) cause:org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]}}

The security configuration for Hadoop has been set to "kerberos", to the "auto: SIMPLE" seems very strange. It also seems as if credential tokens has not been properly set for the `ContainerLaunchContext`s, which may be an issue causing this.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)