Help Center/ MapReduce Service/ Developer Guide (LTS)/ Flink Development Guide (Security Mode)/ FAQs in Flink Application Development/ When I Use a Newly Created Flink User to Submit Tasks, Why Does the Task Submission Fail and a Message Indicating Insufficient Permission on ZooKeeper Directory Is Displayed?
Updated on 2024-08-10 GMT+08:00
View PDF
Share

When I Use a Newly Created Flink User to Submit Tasks, Why Does the Task Submission Fail and a Message Indicating Insufficient Permission on ZooKeeper Directory Is Displayed?

Question

When I use a newly-created Flink user to submit tasks, the task submission fails because of insufficient permission on the ZooKeeper directory. The error message in the log is as follows:

NoAuth for /flink_base/flink/application_1499222480199_0013

Answer

  1. Check whether the permission on the /flink_base directory in ZooKeeper is 'world,'anyone: cdrwa; If no, change the permission on the /flink_base directory to'world,'anyone: cdrwa and go to step 2. If yes, go to step 2.
  2. In the configuration file of Flink, the default value of high-availability.zookeeper.client.acl is creator, indicating that only the creator of the directory has permission on it. The user created later has no access to the /flink_base/flink directory in ZooKeeper because only the user created earlier has permission on it.

    To solve the problem, perform the following operation as the newly-created user:

    1. Check the configuration file conf/flink-conf.yaml on the client.
    2. Modify the parameter high-availability.zookeeper.path.root to the corresponding ZooKeeper directory, for example, /flink2.
    3. Submit tasks again.