Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

How to turn on Yarn capacity queue ACL?

avatar
Rising Star

HDP 2.2.8, Ambari 2.1.2, non-kerberoized cluster.

Client is trying to turn on capacity queue ACL--- only certain users are allowed to submit jobs to a queue; but unlisted users can still submit queues after "save and refresh queues".

Also, got this error wheile refreshServiceAcl

[nveyarn@hg003rdv ~]$ yarn rmadmin -refreshServiceAcl

refreshServiceAcl: java.io.IOException: Service Authorization (hadoop.security.authorization) not enabled.

1 ACCEPTED SOLUTION

avatar
Master Mentor

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

View solution in original post

6 REPLIES 6

avatar
Rising Star

yarn.acl.enabled=true

avatar
Master Mentor

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

avatar
Rising Star

we did run "-refreshQueues", it does not complain, but unlisted user can submit jobs...

avatar
Master Mentor

As discussed ..see this

@rxu@hortonworks.com

avatar
Rising Star

Which version of HDP are you using?

avatar

Hi @rxu@hortonworks.com, here is a KB on this topic that I posted yesterday:

Control user access to Capacity Scheduler queues.