Support Questions
Find answers, ask questions, and share your expertise

How to turn on Yarn capacity queue ACL?

Contributor

HDP 2.2.8, Ambari 2.1.2, non-kerberoized cluster.

Client is trying to turn on capacity queue ACL--- only certain users are allowed to submit jobs to a queue; but unlisted users can still submit queues after "save and refresh queues".

Also, got this error wheile refreshServiceAcl

[nveyarn@hg003rdv ~]$ yarn rmadmin -refreshServiceAcl

refreshServiceAcl: java.io.IOException: Service Authorization (hadoop.security.authorization) not enabled.

1 ACCEPTED SOLUTION

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

View solution in original post

6 REPLIES 6

Contributor

yarn.acl.enabled=true

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

Contributor

we did run "-refreshQueues", it does not complain, but unlisted user can submit jobs...

As discussed ..see this

@rxu@hortonworks.com

Contributor

Which version of HDP are you using?

Hi @rxu@hortonworks.com, here is a KB on this topic that I posted yesterday:

Control user access to Capacity Scheduler queues.

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.