View logs from Job Browser for non superuser

[Michaël Van de Borne]

Hi all,

I have Hue 3.10, installed on a kerberos-enabled cluster, and integrated with LDAP (FreeIPA).

I can login with all users from LDAP.

Here are the wierd things I'm facing at the moment:

1. only the super user can see the logs from the job browser. For regular users, the "View logs" link does not appear.
   
2. as a super user, even if I create a new group, grant it all permissions, and add a user in it, this user cannot view his job logs
   
3. as a super user, I cannot grant super user persmissions to any LDAP user (check box grayed out)
   
4. when I use the ./build/env/bin/hue createsuperser, I cannot log with this user in Hue. Perhaps I only tries to authenticate against LDAP and doesn't fall back to local users. But if I try to create an already exiting LDAP user using the "createsuperuser" method, it prompt the user already exist. So baically I'm stuck with only one super user.
   

Any help appreciated.

 

Cheers,

 

m.

[Jenny Kim]

Hi Michael,

As long as a user has access to view the job, they should be able to see the corresponding logs if they exist.  What page specifically within the Job Browser are you not seeing the expected link (screenshot of superuser vs non-superuser would be helpful).  Also, is this an MR job or Spark?  Spark Job logs are not available from the job list page.

Jenny

--
You received this message because you are subscribed to the Google Groups "Hue-Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to hue-user+u...@cloudera.org.

--

Jenny Kim

Software Engineer on Hue

Cloudera

[Michaël Van de Borne]

Hi Jenny.
MR jobs.
Here are the screenshots.

1 - logged in as super user

"View logs" link is available



2 - logged in as normal user and checking my own job

link to viewing logs is missing





--
Michaël Van de Borne
Free Bird Computing SPRL - Gérant
104 rue d'Azebois, 6230 Thiméon
Tel: +32(0)472 695716
Skype: mikemowgli TVA: BE0637.834.386
Linkedin profile

Le 05-07-16 à 22:53, Jenny Kim a écrit :

[Jenny Kim]

Thanks Michael,

The "View Logs" link you are referring to is actually for Hue's server logs, which is why they are only visible to superusers.  The Job logs however, seem to be throwing an error I assume b/c the Job History Server has purged the job from its archive.  Can you check if that's the case?  If you see the job in the JHS but are still getting this error in Hue, then this is a legitimate bug in Hue and you should submit a separate JIRA issue for that.  The related superuser log output (what you get when you click on "View Logs" as superuser) would be helpful to attach to the ticket.

Jenny

[Romain Rigaux]

Could be
https://issues.cloudera.org/browse/HUE-3356

or
https://issues.cloudera.org/browse/HUE-3079

Would recommend to directly check on http://localhost:19888/jobhistory if the job id is there

[Michaël Van de Borne]

Hi Jenny,

Thank you for this. It turned out my HA RM failed over, so Hue wasn't pointing to the proper job history server anymore, which explains the error on the screenshot.
Now (please see attachment), I can see the job details, but yet not its logs.
However, when browsing the History Server directly, the logs are available.
Is there something I can check?

Thank you,

Cheers,

m.

--
Michaël Van de Borne
Free Bird Computing SPRL - Gérant
104 rue d'Azebois, 6230 Thiméon
Tel: +32(0)472 695716
Skype: mikemowgli TVA: BE0637.834.386
Linkedin profile

Le 05-07-16 à 23:08, Jenny Kim a écrit :

[Michaël Van de Borne]

Hi,

Might not be HUE-3356 since the fix version is 3.10, and I'm running it.
Definitely not HUE-3079 though, since the error occurs even for a running job or a recent job, without restarting the RM.

Summary:
- The job is seen in the JHS
- The job is seen in Hue
- the logs are available in JHS
- the logs aren't available in Hue.

Is there anything I can check?

Thank you,

Cheers,

--
Michaël Van de Borne
Free Bird Computing SPRL - Gérant
104 rue d'Azebois, 6230 Thiméon
Tel: +32(0)472 695716
Skype: mikemowgli TVA: BE0637.834.386
Linkedin profile

Le 12-07-16 à 02:53, Romain Rigaux a écrit :