79778745

Date: 2025-09-30 06:15:42
Score: 1
Natty:
Report link

ISSUE:
TEZ ui is not able to view application in timelineISSUE EXPLANATION:
This issue is not related to tez ui but with timeline server.
We see below error in timelineserver logs:

org.apache.hadoop.yarn.exceptions.YarnException: null is not allowed to get the timeline entity { id: tez_application_<id>, type: TEZ_APPLICATION }.

ROOT CAUSE:
getEntity method will run access check.
First its check if acls are enabled. If no then grant access to everyone.
If no then below check will be performed

if (callerUGI != null && (adminAclsManager.isAdmin(callerUGI) || callerUGI.getShortUserName().equals(owner) || domainACL.isUserAllowed(callerUGI))) { return true; }

Here incoming  callerUGI id is coming as null , hence even if we have * in admin users, access is not granted.

Code files:
https://github.com/apache/hadoop/blob/a585a73c3e02ac62350c136643a5e7f6095a3dbb/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/src/main/java/org/apache/hadoop/yarn/server/timeline/TimelineDataManager.java#L209

https://github.com/apache/hadoop/blob/a585a73c3e02ac62350c136643a5e7f6095a3dbb/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/src/main/java/org/apache/hadoop/yarn/server/timeline/security/TimelineACLsManager.java#L103

Issue is happening in hadoop3 because, In case of hadoop3 callerUGI returns empty and in hadoop2 its return null. (edited)

TimelineDataManager.java

apache/hadoop | Added by GitHub

TimelineACLsManager.java

I have disabled yarn.acl.enable for now
yarn.acl.enable = false

Reasons:
  • Probably link only (1):
  • Long answer (-1):
  • Has code block (-0.5):
  • Self-answer (0.5):
  • Low reputation (1):
Posted by: akash