Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

NameNode is unable to resolve user group mapping

NameNode is unable to resolve user group mapping

Contributor

Currently we have setup NameNode HA (Ambari Managed), one of the NameNode is unable to resolve user group mapping if it is made active. Below is the log I see in NameNode with issue, if it made active. All the users and groups are correctly defined in both the servers.

2016-11-14 18:46:01,089 WARN security.UserGroupInformation (UserGroupInformation.java:getGroupNames(1521)) - No groups available for user yarn

Any ideas on what needs to be validated and how this can be resolved.

4 REPLIES 4

Re: NameNode is unable to resolve user group mapping

Guru

@Saikiran Parepally

Since you have two namenodes and one seems to be working fine, can you compare the following:

  • Login as root
  • su - yarn
  • id

Compare the output from both the systems to see if user Yarn is actually associated with the right group on the namenode which is not able to start due to this error.

Re: NameNode is unable to resolve user group mapping

Contributor

@srai yes both the servers are showing up same group mapping for yarn user.

$ id uid=14097(yarn) gid=528(hadoop) groups=528(hadoop),14097(yarn)

$ id uid=14097(yarn) gid=528(hadoop) groups=528(hadoop),14097(yarn)

Re: NameNode is unable to resolve user group mapping

Guru

Although, it could be only confirmed by looking at the full stack, but you might be hitting this:

https://issues.apache.org/jira/browse/YARN-3804

Was fixed in a later version. This JIRA might also have a workaround by including yarn in acls.

Highlighted

Re: NameNode is unable to resolve user group mapping

Contributor

@srai cluster is not in secure mode. Also issue is not only with yarn user, its the same with all other service accounts.

Don't have an account?
Coming from Hortonworks? Activate your account here