You can force the LCE to impersonate actual users in non-secure mode by turning "yarn.nodemanager.linux-container-executor.nonsecure-mode.limit-users" to false (default is true, which causes it to limit all users to "nobody"). Note though that enabling this ability requires that your users' accounts exist on all nodes in the cluster at the Unix level (i.e. id must return a valid ID for their jobs to work). If you instead just wanted to change the "nobody" user to some other static user, the config for that is "yarn.nodemanager.linux-container-executor.nonsecure-mode.local-user" (default: "nobody"). If you go this way, you need to leave the earlier mentioned config as its default of true. These configs need to be changed in CM's YARN configuration page (either via direct fields if available, or via the yarn-site.xml), and they must reach the NodeManager's configs to apply. These configs are also documented in the yarn-default.xml: http://archive.cloudera.com/cdh5/cdh/5/hadoop/hadoop-yarn/hadoop-yarn-common/yarn-default.xml Does this help?
... View more
