question Re: How to turn on Yarn capacity queue ACL? in Archives of Support Questions (Read Only)

How to turn on Yarn capacity queue ACL?

rxu — Fri, 13 Nov 2015 02:12:16 GMT

HDP 2.2.8, Ambari 2.1.2, non-kerberoized cluster.

Client is trying to turn on capacity queue ACL--- only certain users are allowed to submit jobs to a queue; but unlisted users can still submit queues after "save and refresh queues".

Also, got this error wheile refreshServiceAcl

[nveyarn@hg003rdv ~]$ yarn rmadmin -refreshServiceAcl

refreshServiceAcl: java.io.IOException: Service Authorization (hadoop.security.authorization) not enabled.

Re: How to turn on Yarn capacity queue ACL?

rxu — Fri, 13 Nov 2015 02:13:40 GMT

yarn.acl.enabled=true

Re: How to turn on Yarn capacity queue ACL?

nsabharwal — Fri, 13 Nov 2015 02:17:27 GMT

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capacity_scheduler.html

As discussed ..see this

Re: How to turn on Yarn capacity queue ACL?

rxu — Fri, 13 Nov 2015 02:18:51 GMT

we did run "-refreshQueues", it does not complain, but unlisted user can submit jobs...

Re: How to turn on Yarn capacity queue ACL?

bdurai — Fri, 13 Nov 2015 02:21:12 GMT

Which version of HDP are you using?

Re: How to turn on Yarn capacity queue ACL?

nsabharwal — Fri, 13 Nov 2015 02:34:31 GMT

As discussed ..see this

@rxu@hortonworks.com

Re: How to turn on Yarn capacity queue ACL?

amiller — Fri, 13 Nov 2015 07:16:01 GMT

Hi @rxu@hortonworks.com, here is a KB on this topic that I posted yesterday:

Control user access to Capacity Scheduler queues.