question Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log in Archives of Support Questions (Read Only)

TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

aervits — Mon, 19 Sep 2022 18:51:15 GMT

here's the message

here's a quick fix, replace root with the user executing the job

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

deepesh1 — Thu, 29 Oct 2015 23:02:46 GMT

Which Ambari version did you use to install the cluster?

Ambari fixed the issue in its 2.1.1 version, see AMBARI-12415. The issue was with the setting of property "yarn.admin.acl" value.

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

aervits — Thu, 29 Oct 2015 23:11:31 GMT

this is in Sandbox 2.3.2

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

rmolina — Fri, 30 Oct 2015 04:55:07 GMT

Hi Artem,

You have steps to repro? I run a tez job and don't get the behavior.

Regards,

Robert

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

gbraccialli3 — Fri, 30 Oct 2015 11:25:38 GMT

@rmolina@hortonworks.com same here sandbox 2.3.2. it's easy to reproduce, it happens to all applications created by spark-shell, spark-submit or zeppelin

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

aervits — Fri, 30 Oct 2015 19:44:38 GMT

not just spark, mapreduce as well. I ran an oozie job that executes a pig script in mapreduce mode and it prompted that message

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

azeltov — Fri, 30 Oct 2015 22:43:07 GMT

@rmolina@hortonworks.com I was just able to confirm this behavior on the latest 2.3.2 sandbox when you go to Resource Manager UI , you get the same error message [Dr.Who]

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

rmolina — Wed, 25 Nov 2015 09:23:15 GMT

This should help:

PROBLEM Customer unable to see logs via Resource Manager UI due to incorrect permissions for the default user dr.who.

RESOLUTION Customer changed the following property in core-site.xml to resolve the issue. Other values such as hdfs or mapred also resolve the issue. If the cluster is managed by Ambari, this should be added in Ambari > HDFS > Configurations >Advanced core-site > Add Property

hadoop.http.staticuser.user=yarn

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

aervits — Wed, 25 Nov 2015 10:11:02 GMT

Just tested this, it does work, can we set this by default in the future Sandbox releases?

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

rmolina — Tue, 01 Dec 2015 08:05:17 GMT

Just want to add to this post, there is actually lots of ways to fix this issue, but the root cause of the issue on Sandbox is that setting "yarn.acl.enable" to true. It should be set to false since, which is what Ambari does by default for non secure clusters. The Sandbox team is looking into this and probably fix in the next update sometime in January. Bug reference is BUG-48765

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

japan_shah — Thu, 14 Apr 2016 20:44:04 GMT

Thanks it worked for me !

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

muanang — Tue, 05 Jul 2016 13:15:55 GMT

Applied the suggested parameter on our env cluster, and it works!

Thanks!

https://community.hortonworks.com/questions/43331/user-drwho-is-not-authorized-to-view-the-logs.html

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

rmanimkr — Mon, 17 Oct 2016 15:56:26 GMT

@rmolina, Just a note on the Section to add the property.

It is Ambari > HDFS > Configurations >Custom core-site > Add Property

I believe, Adding properties under Advanced Core site is not possible.

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

javvaji_hari_ki — Sun, 18 Dec 2016 01:12:34 GMT

what is dr.who ? Can some one explain me

I saw in my environment for yarn.admin.acl - yarn, dr.who

Re: TIP: when you get a message in job log user [Dr. Who] is not authorized to view the log

pdegave — Thu, 15 Jun 2017 14:10:40 GMT

@hari Kishore javvaji

Dr.who is the default username/static for hadoop core property : "hadoop.htttp.staticuser.user"

The description say's : The user name to filter as, on static web filters while rendering content. An example use is the HDFS web UI (user to be used for browsing files) See this: [1] http://hadoop.apache.org/docs/r2.8.0/hadoop-project-dist/hadoop-common/core-default.xml

Hope this answered your question.