ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-9982) Oozie connection refused: unable to initialize service, Cannot get password from user.
Date Mon, 09 Mar 2015 13:29:38 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-9982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas updated AMBARI-9982:
---------------------------------
    Attachment: AMBARI-9982_branch-2.0.0_01.patch

> Oozie connection refused: unable to initialize service, Cannot get password from user.
> --------------------------------------------------------------------------------------
>
>                 Key: AMBARI-9982
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9982
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Blocker
>              Labels: kerberos
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9982_branch-2.0.0_01.patch, AMBARI-9982_trunk_01.patch
>
>
> Oozie connection refused: unable to initialize service, Cannot get password from user.
> {noformat}
> org.apache.oozie.service.ServiceException: E0100: Could not initialize service [org.apache.oozie.service.HadoopAccessorService],
Login failure for oozie/ip-172-31-34-48.ec2.internal@EXAMPLE.COM from keytab /etc/security/keytabs/oozie.service.keytab:
javax.security.auth.login.LoginException: Unable to obtain password from user
> 	at org.apache.oozie.service.HadoopAccessorService.kerberosInit(HadoopAccessorService.java:187)
> 	at org.apache.oozie.service.HadoopAccessorService.init(HadoopAccessorService.java:130)
> 	at org.apache.oozie.service.HadoopAccessorService.init(HadoopAccessorService.java:101)
> 	at org.apache.oozie.service.Services.setServiceInternal(Services.java:383)
> 	at org.apache.oozie.service.Services.setService(Services.java:369)
> 	at org.apache.oozie.service.Services.loadServices(Services.java:302)
> 	at org.apache.oozie.service.Services.init(Services.java:210)
> 	at org.apache.oozie.servlet.ServicesLoader.contextInitialized(ServicesLoader.java:45)
> 	at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4210)
> 	at org.apache.catalina.core.StandardContext.start(StandardContext.java:4709)
> 	at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:799)
> 	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:779)
> 	at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:583)
> 	at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:675)
> 	at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:601)
> 	at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:502)
> 	at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1317)
> 	at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:324)
> 	at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
> 	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1065)
> 	at org.apache.catalina.core.StandardHost.start(StandardHost.java:822)
> 	at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1057)
> 	at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
> 	at org.apache.catalina.core.StandardService.start(StandardService.java:525)
> 	at org.apache.catalina.core.StandardServer.start(StandardServer.java:754)
> 	at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
> 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> 	at java.lang.reflect.Method.invoke(Method.java:606)
> 	at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
> 	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
> Caused by: java.io.IOException: Login failure for oozie/ip-172-31-34-48.ec2.internal@EXAMPLE.COM
from keytab /etc/security/keytabs/oozie.service.keytab: javax.security.auth.login.LoginException:
Unable to obtain password from user
> 	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:935)
> 	at org.apache.oozie.service.HadoopAccessorService.kerberosInit(HadoopAccessorService.java:179)
> 	... 31 more
> Caused by: javax.security.auth.login.LoginException: Unable to obtain password from user
> 	at com.sun.security.auth.module.Krb5LoginModule.promptForPass(Krb5LoginModule.java:856)
> 	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:719)
> 	at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:584)
> 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> 	at java.lang.reflect.Method.invoke(Method.java:606)
> 	at javax.security.auth.login.LoginContext.invoke(LoginContext.java:762)
> 	at javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
> 	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:690)
> 	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:688)
> 	at java.security.AccessController.doPrivileged(Native Method)
> 	at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:687)
> 	at javax.security.auth.login.LoginContext.login(LoginContext.java:595)
> 	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:926)
> 	... 32 more
> {noformat}
> This issue is really related to unexpected data in the oozie-site.xml file. It is expected
that the principals names contain {{_HOST}} rather than the resolved hostname. This appears
to be a viable solution for Oozie version 4.1.0.2.2.2.0, but not for version 4.0.0.2.0.14.0.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message