Yarn log   Diagnostics: Application application_1540299431797_0022 initialization failed (exitCode=255) with output: main : command provided 0 main : run as user is ххх main : requested yarn user is ххх User ххх not found Failing this attempt. Failing the application ... View more

The reason of this problems was that HDFS is looking for uidNumber in memberUid and Hue is looking for uid in memberUid. As I added uidNumber in memberUid  for my user in addition to other memberUids everything started to work.   On the picture memberUid=1004 and memberUid=maslova is the same user     Is there any other method to fix the problem, because if we leave membership like this we would have to add users in groups twice: uids and uidnumbers ... View more

@bgooley    Hello!   The changes you have adviced in search filter  (&(objectClass=posixAccount)(uid={0})) had an effect!   Now the command hdfs groups hdfs returns hdfs : hdfs   hdfs groups maslova maslova : maslova   Now the search bind returns the group, which is in gidNumber of the account.   LDAP log:   Oct 9 10:16:40 sspeapp01v slapd[29022]: conn=88425 op=2613 SRCH base="dc=sec,dc=oteco" scope=2 deref=3 filter="(&(objectClass=posixAccount)(uid=maslova))" Oct 9 10:16:40 sspeapp01v slapd[29022]: conn=88425 op=2613 SRCH attr=cn uidNumber gidNumber Oct 9 10:16:40 sspeapp01v slapd[29022]: <= mdb_equality_candidates: (uid) not indexed Oct 9 10:16:40 sspeapp01v slapd[29022]: conn=88425 op=2613 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 9 10:16:40 sspeapp01v slapd[29022]: conn=88425 op=2614 SRCH base="dc=sec,dc=oteco" scope=2 deref=3 filter="(&(objectClass=posixGroup)(|(gidNumber=1004)(memberUid=1004)))" Oct 9 10:16:40 sspeapp01v slapd[29022]: conn=88425 op=2614 SRCH attr=cn uidNumber gidNumber Oct 9 10:16:40 sspeapp01v slapd[29022]: <= mdb_equality_candidates: (gidNumber) not indexed Oct 9 10:16:40 sspeapp01v slapd[29022]: <= mdb_equality_candidates: (memberUid) not indexed     HDFS configuration looks like:   Hadoop User Group Mapping LDAP Group Search Filter (objectClass=posixGroup) Hadoop User Group Mapping LDAP Group Membership Attribute memberUid Hadoop User Group Mapping LDAP Group Name Attribute cn   Something is wrong with these lines, I think   ... View more

@bgooley   Unfortunately that did not help ... View more

@bgooley   Hi   Host     <property>     <name>hadoop.security.group.mapping</name>     <value>org.apache.hadoop.security.LdapGroupsMapping</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.url</name>     <value>ldap://sspeapp01v.sec.oteco</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.bind.user</name>     <value>cn=admin,dc=sec,dc=oteco</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.base</name>     <value>dc=sec,dc=oteco</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.filter.user</name>     <value>(objectClass=posixAccount)</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.filter.group</name>     <value>(objectClass=posixGroup)</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.attr.member</name>     <value>memberUid</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.attr.group.name</name>     <value>cn</value>   </property>   NameNode   <property>     <name>hadoop.security.group.mapping</name>     <value>org.apache.hadoop.security.LdapGroupsMapping</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.url</name>     <value>ldap://sspeapp01v.sec.oteco</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.bind.user</name>     <value>cn=admin,dc=sec,dc=oteco</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.bind.password</name>     <value>********</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.base</name>     <value>dc=sec,dc=oteco</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.filter.user</name>     <value>(objectClass=posixAccount)</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.filter.group</name>     <value>(objectClass=posixGroup)</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.attr.member</name>     <value>memberUid</value>   </property>   <property>     <name>hadoop.security.group.mapping.ldap.search.attr.group.name</name>     <value>cn</value>   </property>     And there is no hadoop.user.group.static.mapping.overrides in core-site.xml     ... View more