[jira] [Comment Edited] (SLIDER-1010) SliderAM rejecting launch in a secure cluster -claims user not on a keytab

["Steve Loughran (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLIDER-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15045142#comment-15045142 ] 

Steve Loughran edited comment on SLIDER-1010 at 12/7/15 4:08 PM:
-----------------------------------------------------------------

I'm downgrading from a failure to an error message:
{code}
"User is not holding on a keytab in a secure deployment slider will fail as tokens expire"
{code}

We could try and be clever and look for the config settings for a keytab and recognise the specific JVM settings causing the problems, but it'd be near-impossible to test, and wouldn't add much.


was (Author: stevel@apache.org):
I'm downgrading from a failure to an error message:
{code}
"User is not holding on a keytab in a secure deployment:
          " slider will fail as tokens expire"

> SliderAM rejecting launch in a secure cluster -claims user not on a keytab
> --------------------------------------------------------------------------
>
>                 Key: SLIDER-1010
>                 URL: https://issues.apache.org/jira/browse/SLIDER-1010
>             Project: Slider
>          Issue Type: Bug
>          Components: appmaster, security
>    Affects Versions: Slider 0.81
>         Environment: kerberos
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>
> Am failing to launch in a secure cluster
> {code}
> 2015-12-02 21:08:21,791 [main] INFO  security.UserGroupInformation - Login successful for user <omitted> using keytab file /grid/5/tmp/yarn-local/usercache/bigml/appcache/application_1447892961767_1838814/container_e02_1447892961767_1838814_02_000001/keytabs/headless.keytab
> 2015-12-02 21:08:21,791 [main] ERROR main.ServiceLauncher - User is not based on a keytab in a secure deployment.
> {code}
> This looks like the keytab checking code isn't working



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)