falcon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Balu Vellanki (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (FALCON-2033) ProcessRerun tests fail with User [falcon] not authorized for Coord job
Date Fri, 17 Jun 2016 00:50:05 GMT

    [ https://issues.apache.org/jira/browse/FALCON-2033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15335103#comment-15335103
] 

Balu Vellanki edited comment on FALCON-2033 at 6/17/16 12:49 AM:
-----------------------------------------------------------------

Falcon suspend, resume and kill tasks are submitted using CLI or RestAPI as user who is same
as user submit/schedule the entity. So falcon does doAs(...) and the actions succeed. LateRerun
task is run by Falcon on server side, so when Oozie has oozie.service.AuthorizationService.security.enabled
set to true, the rerun tasks by Falcon will fail with error "User [falcon] not authorized
for Coord job"
The solution is to run the re-run jobs as the user of workflow job.

 Thanks [~yzheng-hortonworks]


was (Author: bvellanki):
Falcon should get user from workflow job and rerun the job as that user. I am working on a
patch right now. Thanks [~yzheng-hortonworks]

> ProcessRerun tests fail with User [falcon] not authorized for Coord job
> -----------------------------------------------------------------------
>
>                 Key: FALCON-2033
>                 URL: https://issues.apache.org/jira/browse/FALCON-2033
>             Project: Falcon
>          Issue Type: Bug
>          Components: rerun
>            Reporter: Balu Vellanki
>            Assignee: Balu Vellanki
>            Priority: Critical
>             Fix For: trunk, 0.10
>
>
> Tests that do process rerun are failing with following error in Falcon logs. Perhaps
some configuration by Ambari in site.xml's is missing
> {noformat}
> 2016-05-18 04:52:59,912 ERROR - [LaterunHandler:] ~ Unable to rerun workflows (OozieWorkflowEngine:1032)
> E0509 : E0509: User [falcon] not authorized for Coord job [0000161-160518031342246-oozie-oozi-C]
> 	at org.apache.oozie.client.OozieClient.handleError(OozieClient.java:613)
> 	at org.apache.oozie.client.OozieClient$CoordRerun.call(OozieClient.java:1629)
> 	at org.apache.oozie.client.OozieClient$CoordRerun.call(OozieClient.java:1606)
> 	at org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:561)
> 	at org.apache.oozie.client.OozieClient.reRunCoord(OozieClient.java:1686)
> 	at org.apache.falcon.workflow.engine.OozieWorkflowEngine.reRunCoordAction(OozieWorkflowEngine.java:1024)
> 	at org.apache.falcon.workflow.engine.OozieWorkflowEngine.reRun(OozieWorkflowEngine.java:1552)
> 	at org.apache.falcon.rerun.handler.LateRerunConsumer.handleRerun(LateRerunConsumer.java:88)
> 	at org.apache.falcon.rerun.handler.LateRerunConsumer.handleRerun(LateRerunConsumer.java:50)
> 	at org.apache.falcon.rerun.handler.AbstractRerunConsumer.run(AbstractRerunConsumer.java:83)
> 	at java.lang.Thread.run(Thread.java:745)
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message