How to turn on Yarn capacity queue ACL?

[#1]

HDP 2.2.8, Ambari 2.1.2, non-kerberoized cluster.

Client is trying to turn on capacity queue ACL--- only certain users are allowed to submit jobs to a queue; but unlisted users can still submit queues after "save and refresh queues".

Also, got this error wheile refreshServiceAcl

[nveyarn@hg003rdv ~]$ yarn rmadmin -refreshServiceAcl

refreshServiceAcl: java.io.IOException: Service Authorization (hadoop.security.authorization) not enabled.

[#2]

yarn.acl.enabled=true

[#3 · Accepted solution]

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

[#4]

we did run "-refreshQueues", it does not complain, but unlisted user can submit jobs...

[#5]

As discussed ..see this

@rxu@hortonworks.com

[#6]

Which version of HDP are you using?

[#7]

Hi @rxu@hortonworks.com, here is a KB on this topic that I posted yesterday:

Control user access to Capacity Scheduler queues.