You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by ds...@apache.org on 2017/06/19 09:13:17 UTC
ambari git commit: AMBARI-21250 update yarn-env.xml in HDP2.6 for
YARN sinks' HTTP SPNEGO Authentication (qinliu via dsen)
Repository: ambari
Updated Branches:
refs/heads/trunk 9bf9bbc84 -> 2a844d706
AMBARI-21250 update yarn-env.xml in HDP2.6 for YARN sinks' HTTP SPNEGO Authentication (qinliu via dsen)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/2a844d70
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/2a844d70
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/2a844d70
Branch: refs/heads/trunk
Commit: 2a844d706bb6c76812edee3cb0e57bad2f9c5776
Parents: 9bf9bbc
Author: Dmytro Sen <ds...@apache.org>
Authored: Mon Jun 19 12:13:02 2017 +0300
Committer: Dmytro Sen <ds...@apache.org>
Committed: Mon Jun 19 12:13:02 2017 +0300
----------------------------------------------------------------------
.../HDP/2.6/services/YARN/configuration/yarn-env.xml | 15 +++++++++++++--
1 file changed, 13 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/2a844d70/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml b/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
index 1b2ca68..121a81d 100644
--- a/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
+++ b/ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/configuration/yarn-env.xml
@@ -108,7 +108,9 @@
# Specify the JVM options to be used when starting the ResourceManager.
# These options will be appended to the options specified as YARN_OPTS
# and therefore may override any similar flags set in YARN_OPTS
- #export YARN_RESOURCEMANAGER_OPTS=
+ {% if security_enabled %}
+ export YARN_RESOURCEMANAGER_OPTS="-Djava.security.auth.login.config={{yarn_jaas_file}}"
+ {% endif %}
# Node Manager specific parameters
@@ -130,10 +132,16 @@
# or JAVA_HEAP_MAX with YARN_HEAPMAX as the preferred option of the two.
export YARN_TIMELINESERVER_HEAPSIZE={{apptimelineserver_heapsize}}
+ {% if security_enabled %}
+ export YARN_TIMELINESERVER_OPTS="-Djava.security.auth.login.config={{yarn_ats_jaas_file}}"
+ {% endif %}
+
# Specify the JVM options to be used when starting the NodeManager.
# These options will be appended to the options specified as YARN_OPTS
# and therefore may override any similar flags set in YARN_OPTS
- #export YARN_NODEMANAGER_OPTS=
+ {% if security_enabled %}
+ export YARN_NODEMANAGER_OPTS="-Djava.security.auth.login.config={{yarn_nm_jaas_file}}"
+ {% endif %}
# so that filenames w/ spaces are handled correctly in loops below
IFS=
@@ -174,6 +182,9 @@
{% if rm_security_opts is defined %}
YARN_OPTS="{{rm_security_opts}} $YARN_OPTS"
{% endif %}
+ {% if security_enabled %}
+ YARN_OPTS="$YARN_OPTS -Djavax.security.auth.useSubjectCredsOnly=false"
+ {% endif %}
</value>
<value-attributes>
<type>content</type>