Hello! I have HDP 2.5 cluster with KERBEROS enabled, connected to Active Directory. When I try to switch on HTTP AUTH - https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.2/bk_security/content/_configuring_http_authentication_for_HDFS_YARN_MapReduce2_HBase_Oozie_Falcon_and_Storm.html Logs can be retrived using shell yarn logs -applicationId application_1509115509826_0001 I can't access any logs from YARN UI for example <YARN-RM-HOST>:19888/jobhistory/logs/<NODE>:45454/container_e56_1509115509826_0001_01_000001/container_e56_1509115509826_0001_01_000001/hive With following error: User <MY Active Directory User> is not authorized to view the logs for container_e56_1509115509826_0001_01_000001 in log file [<NODE>_45454_1509118017724]No logs available for container container_e56_1509115509826_0001_01_000001 ... View more

Is it possible to identify active YARN ResourceManager using ZooKeeper or any other method? ... View more

Hi, all! Environment: RHEL 7.2 + Winbind HDP 2.5 Ranger 0.6.0.2.5 AD: Windows 2008 R2 Server User sync and group sync configured. QUESTION: I have some groups in AD with users inside. User in group pointed as member=CN=FirstName LastName, DN=EXAMPLE, DN=COM Exactly the same FirstName LastName synced inside Ranger while usersync working. However Ranger use sAMAccountName in policy and sAMAccountName came from Kerberos. Is it possible to sync user from groups with sAMAccountName instead of CN? ... View more