Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How to turn on Yarn capacity queue ACL?

Solved Go to solution

How to turn on Yarn capacity queue ACL?

Contributor

HDP 2.2.8, Ambari 2.1.2, non-kerberoized cluster.

Client is trying to turn on capacity queue ACL--- only certain users are allowed to submit jobs to a queue; but unlisted users can still submit queues after "save and refresh queues".

Also, got this error wheile refreshServiceAcl

[nveyarn@hg003rdv ~]$ yarn rmadmin -refreshServiceAcl

refreshServiceAcl: java.io.IOException: Service Authorization (hadoop.security.authorization) not enabled.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: How to turn on Yarn capacity queue ACL?

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

6 REPLIES 6

Re: How to turn on Yarn capacity queue ACL?

Contributor

yarn.acl.enabled=true

Re: How to turn on Yarn capacity queue ACL?

@rxu@hortonworks.com

This command can only be run by cluster administrators. Administrator privileges are configured with the yarn.admin.acl property on the ResourceManager.

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_yarn_resource_mgt/content/enabling_capaci...

As discussed ..see this

Re: How to turn on Yarn capacity queue ACL?

Contributor

we did run "-refreshQueues", it does not complain, but unlisted user can submit jobs...

Re: How to turn on Yarn capacity queue ACL?

As discussed ..see this

@rxu@hortonworks.com

Re: How to turn on Yarn capacity queue ACL?

Contributor

Which version of HDP are you using?

Re: How to turn on Yarn capacity queue ACL?

Hi @rxu@hortonworks.com, here is a KB on this topic that I posted yesterday:

Control user access to Capacity Scheduler queues.