Return-Path: X-Original-To: apmail-hadoop-user-archive@minotaur.apache.org Delivered-To: apmail-hadoop-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 99E4DD2E1 for ; Wed, 28 Nov 2012 23:32:45 +0000 (UTC) Received: (qmail 83885 invoked by uid 500); 28 Nov 2012 23:32:40 -0000 Delivered-To: apmail-hadoop-user-archive@hadoop.apache.org Received: (qmail 83800 invoked by uid 500); 28 Nov 2012 23:32:40 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 83792 invoked by uid 99); 28 Nov 2012 23:32:40 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Nov 2012 23:32:40 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of rmolina@hortonworks.com designates 209.85.212.48 as permitted sender) Received: from [209.85.212.48] (HELO mail-vb0-f48.google.com) (209.85.212.48) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Nov 2012 23:32:35 +0000 Received: by mail-vb0-f48.google.com with SMTP id l22so14689627vbn.35 for ; Wed, 28 Nov 2012 15:32:15 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:x-gm-message-state; bh=MKD2xBltK0PIgeQXhED1vgU7Ah10lWRc99tK3cqa2Ys=; b=DTXDI90c2sgz2FbS8RIe/IRRWQ01kqv2KpCdbAH8EfHEr9ZHdZv5GOxxJdvU6D2tx5 vhJtth0GKHJ5ab1S5dF6znhnXjNoL7SaCjCmQ6mrVa+nvBHLhlwKlGp/miHkPYcRIlX+ +OQMe8qAPZKK0YjkybogS9g1WrLk5nNsA4o+QOe5DKTKCPOptuVSGyqAMQFhlAQ/2fwP hB/B3TYKFkjbwT+Ar8iTXRPM9gQDW3kixJkuspGwaA3J+8lkDNcmId2d2DJDoDcNOjba TyM1fmfumY3YtaEvIY8dASPQ3S1+563THWCCZTPRW6DRz9PDjO5e5gYcr5mw+71OJEZf mLGw== MIME-Version: 1.0 Received: by 10.52.93.146 with SMTP id cu18mr20890885vdb.37.1354145534958; Wed, 28 Nov 2012 15:32:14 -0800 (PST) Received: by 10.58.77.205 with HTTP; Wed, 28 Nov 2012 15:32:14 -0800 (PST) In-Reply-To: References: <4C785CFE-E5A4-4D4F-8781-0D5F59167FB1@gmail.com> <51736F97-FE9A-4A23-84EA-71C3FB87CCF3@gmail.com> Date: Wed, 28 Nov 2012 15:32:14 -0800 Message-ID: Subject: Re: notorious impersonation ERROR From: Robert Molina To: user@hadoop.apache.org Content-Type: multipart/alternative; boundary=bcaec50162d595dbe504cf9693f9 X-Gm-Message-State: ALoCoQnvPHEkHaY1PHru16RRzqi2+JdTmgCcug9htYJy8mDgIRqvd2Gq64LNv8lHn4rIcf5XE/pq X-Virus-Checked: Checked by ClamAV on apache.org --bcaec50162d595dbe504cf9693f9 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Just to add Alejandro's information regarding the wildcard support, here is the reference to the fix: https://issues.apache.org/jira/browse/HADOOP-6995 On Tue, Nov 13, 2012 at 11:26 AM, Alejandro Abdelnur wro= te: > Andy, Oleg, > > What versions of Oozie and Hadoop are you using? > > Some versions of Hadoop allow using a wildcard '*' in the hosts/groups > proxyuser settings in the JT and NN, others don't. Also, you have to > set the host/group proxyuser both in the JT and NN and restart them. > > Thx > > On Fri, Nov 9, 2012 at 6:34 AM, Oleg Zhurakousky > wrote: > > Not sure, haven't got that far yet ;) > > > > On Nov 9, 2012, at 9:27 AM, "Kartashov, Andy" > wrote: > > > >> Oleg, > >> > >> Thanks. I had added oozie to the hadoop group. Do I also need to > restart NN daemon? > >> > >> > >> -----Original Message----- > >> From: Oleg Zhurakousky [mailto:oleg.zhurakousky@gmail.com] > >> Sent: Friday, November 09, 2012 9:24 AM > >> To: user@hadoop.apache.org > >> Subject: Re: notorious impersonation ERROR > >> > >> Have you tried this? > >> > >> Let's say your oozie user is 'oozie' and Name node group is called > hadoop > >> > >> sudo adduser --ingroup hadoop oozie > >> > >> Oleg > >> > >> On Nov 9, 2012, at 9:20 AM, "Kartashov, Andy" > wrote: > >> > >>> Guys, > >>> > >>> Came across this error like many others who tried to run Ooozie > examples. Searched and read bunch of posts on this topic. Even came acros= s > Harsh's response stipulating that oozie user must be added to the user > group on the name node but it wasn't explained how. Any insight please? > >>> > >>> Thnks, > >>> aK47 > >>> NOTICE: This e-mail message and any attachments are confidential, > subject to copyright and may be privileged. Any unauthorized use, copying > or disclosure is prohibited. If you are not the intended recipient, pleas= e > delete and contact the sender immediately. Please consider the environmen= t > before printing this e-mail. AVIS : le pr=E9sent courriel et toute pi=E8c= e > jointe qui l'accompagne sont confidentiels, prot=E9g=E9s par le droit d'a= uteur > et peuvent =EAtre couverts par le secret professionnel. Toute utilisation= , > copie ou divulgation non autoris=E9e est interdite. Si vous n'=EAtes pas = le > destinataire pr=E9vu de ce courriel, supprimez-le et contactez imm=E9diat= ement > l'exp=E9diteur. Veuillez penser =E0 l'environnement avant d'imprimer le p= r=E9sent > courriel > >> > >> NOTICE: This e-mail message and any attachments are confidential, > subject to copyright and may be privileged. Any unauthorized use, copying > or disclosure is prohibited. If you are not the intended recipient, pleas= e > delete and contact the sender immediately. Please consider the environmen= t > before printing this e-mail. AVIS : le pr=E9sent courriel et toute pi=E8c= e > jointe qui l'accompagne sont confidentiels, prot=E9g=E9s par le droit d'a= uteur > et peuvent =EAtre couverts par le secret professionnel. Toute utilisation= , > copie ou divulgation non autoris=E9e est interdite. Si vous n'=EAtes pas = le > destinataire pr=E9vu de ce courriel, supprimez-le et contactez imm=E9diat= ement > l'exp=E9diteur. Veuillez penser =E0 l'environnement avant d'imprimer le p= r=E9sent > courriel > > > > > > -- > Alejandro > --bcaec50162d595dbe504cf9693f9 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Just to add Alejandro's information regarding the wildcard support, her= e is the reference to the fix:




On Tue, Nov 13,= 2012 at 11:26 AM, Alejandro Abdelnur <tucu@cloudera.com> wr= ote:
Andy, Oleg,

What versions of Oozie and Hadoop are you using?

Some versions of Hadoop allow using a wildcard '*' in the hosts/gro= ups
proxyuser settings in the JT and NN, others don't. Also, you have to set the host/group =A0proxyuser both in the JT and NN and restart them.

Thx

On Fri, Nov 9, 2012 at 6:34 AM, Oleg Zhurakousky
<oleg.zhurakousky@gmail.co= m> wrote:
> Not sure, haven't got that far yet ;)
>
> On Nov 9, 2012, at 9:27 AM, "Kartashov, Andy" <Andy.Kartashov@mpac.ca> wrote:
>
>> Oleg,
>>
>> Thanks. I had added oozie to the hadoop group. Do I also need to r= estart NN daemon?
>>
>>
>> -----Original Message-----
>> From: Oleg Zhurakousky [mailto:oleg.zhurakousky@gmail.com]
>> Sent: Friday, November 09, 2012 9:24 AM
>> To: user@hadoop.apache.o= rg
>> Subject: Re: notorious impersonation ERROR
>>
>> Have you tried this?
>>
>> Let's say your oozie user is 'oozie' and Name node gro= up is called hadoop
>>
>> sudo adduser --ingroup hadoop oozie
>>
>> Oleg
>>
>> On Nov 9, 2012, at 9:20 AM, "Kartashov, Andy" <Andy.Kartashov@mpac.ca> wrote: >>
>>> Guys,
>>>
>>> Came across this error like many others who tried to run Ooozi= e examples. Searched and read bunch of posts on this topic. Even came acros= s Harsh's response stipulating that oozie user must be added to the use= r group on the name node but it wasn't explained how. Any insight pleas= e?
>>>
>>> Thnks,
>>> aK47
>>> NOTICE: This e-mail message and any attachments are confidenti= al, subject to copyright and may be privileged. Any unauthorized use, copyi= ng or disclosure is prohibited. If you are not the intended recipient, plea= se delete and contact the sender immediately. Please consider the environme= nt before printing this e-mail. AVIS : le pr=E9sent courriel et toute pi=E8= ce jointe qui l'accompagne sont confidentiels, prot=E9g=E9s par le droi= t d'auteur et peuvent =EAtre couverts par le secret professionnel. Tout= e utilisation, copie ou divulgation non autoris=E9e est interdite. Si vous = n'=EAtes pas le destinataire pr=E9vu de ce courriel, supprimez-le et co= ntactez imm=E9diatement l'exp=E9diteur. Veuillez penser =E0 l'envir= onnement avant d'imprimer le pr=E9sent courriel
>>
>> NOTICE: This e-mail message and any attachments are confidential, = subject to copyright and may be privileged. Any unauthorized use, copying o= r disclosure is prohibited. If you are not the intended recipient, please d= elete and contact the sender immediately. Please consider the environment b= efore printing this e-mail. AVIS : le pr=E9sent courriel et toute pi=E8ce j= ointe qui l'accompagne sont confidentiels, prot=E9g=E9s par le droit d&= #39;auteur et peuvent =EAtre couverts par le secret professionnel. Toute ut= ilisation, copie ou divulgation non autoris=E9e est interdite. Si vous n= 9;=EAtes pas le destinataire pr=E9vu de ce courriel, supprimez-le et contac= tez imm=E9diatement l'exp=E9diteur. Veuillez penser =E0 l'environne= ment avant d'imprimer le pr=E9sent courriel
>



--
Alejandro

--bcaec50162d595dbe504cf9693f9--