question Re: TEZ View- Queries tab doesn't show any query, though DAG is available. (After configuring http authentication with SPNEGO/Kerberos) in Archives of Support Questions (Read Only)

TEZ View- Queries tab doesn't show any query, though DAG is available. (After configuring http authentication with SPNEGO/Kerberos)

tsharma — Fri, 11 Aug 2017 18:31:47 GMT

Hi,

I set up Ambari-server security https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_configuring_http_authentication_for_HDFS_YARN_MapReduce2_HBase_Oozie_Falcon_and_Storm.html

And followed https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_ambari_views_guide/content/section_kerberos_setup_tez_view.html for setting up Tez view with Kerberos.

However, I'm not seeing any data in query tab anymore, though the same query gets listed in DAGs and all information is available there.

Before setting up my cluster for Kerberos, I saw the query tab populated with old/new queries.

Does someone know why this may be happening?

Thanks

screen-shot-2017-08-11-at-45052-pm.png

screen-shot-2017-08-11-at-45032-pm.png

screen-shot-2017-08-11-at-45121-pm.png

Re: TEZ View- Queries tab doesn't show any query, though DAG is available. (After configuring http authentication with SPNEGO/Kerberos)

mugdha — Sun, 18 Aug 2019 03:16:40 GMT

@tsharma Please check this:

This is the default ACL:

This right now has only 3 users dr.who,activity_analyzer,yarn.

And user logged in to Ambari is “admin”. Now it says “No records available!”

This is because, there are no jobs which are run by ‘admin’ user yet.

Say you have a user hr1, who also runs the job in the cluster. When I log into Ambari as hr1 user, I can see the jobs only for hr1:

Now I added “admin” user into yarn.admin.acl:

Then I can see all the jobs run by all the users:

If you want the users who login into Ambari but do not run any jobs in the cluster to see the queries here, either add that user in “yarn.admin.acl” or set it to “*”

Re: TEZ View- Queries tab doesn't show any query, though DAG is available. (After configuring http authentication with SPNEGO/Kerberos)

tsharma — Sat, 12 Aug 2017 09:20:07 GMT

@Mugdha

One more thing, I was seeing the config versions for YARN, and in v1 (just after installation), yarn.acl.enable is set to false.

Is this property set to true while Kerberizing?

Re: TEZ View- Queries tab doesn't show any query, though DAG is available. (After configuring http authentication with SPNEGO/Kerberos)

mugdha — Thu, 17 Aug 2017 07:12:03 GMT

@tsharma In my cluster I do see that after enabling Kerberos yarn.acl.enable was set to true. I am not sure though..