incubator-oozie-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Grant Ingersoll <>
Subject Oozie Security/Impersonation
Date Fri, 20 Apr 2012 16:27:31 GMT

I'm trying to get 3.2.0-SNAPSHOT (trunk as of yesterday) to work with Hadoop 1.0.2.  I've
got it built, etc. and hooked in the libs for Hadoop.  However, when I go to submit a workflow,
I get

012-04-20 12:24:14,350 ERROR UserGroupInformation:1096 - PriviledgedActionException as:hadoop
via hadoop cause:org.apache.hadoop.ipc.RemoteException: User: hadoop is not allowed to impersonate
2012-04-20 12:24:14,351  INFO BaseJobServlet:539 - USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-]
ACTION[-] AuthorizationException 
org.apache.oozie.service.AuthorizationException: E0902: Exception occured: [org.apache.hadoop.ipc.RemoteException:
User: hadoop is not allowed to impersonate hadoop]
	at org.apache.oozie.service.AuthorizationService.authorizeForApp(
	at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(
	at org.apache.oozie.servlet.BaseJobsServlet.doPost(
	at javax.servlet.http.HttpServlet.service(
	at org.apache.oozie.servlet.JsonRestServlet.service(
	at javax.servlet.http.HttpServlet.service(
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(
	at org.apache.oozie.servlet.AuthFilter$2.doFilter(
	at org.apache.oozie.servlet.AuthFilter.doFilter(

I am using the default oozie-site.xml.  I have simple authentication turned on.  I have anonymous
users turned on.  Moreover, as you can see by the exception, I am running Oozie as the same
user as I am running Hadoop.  I have tried uncommenting the proxy user in oozie-site.

Any thoughts on what I am missing?


PS: bin/ doesn't seem to support Hadoop 1.0.x yet, despite the libraries being
in hadooplibs.  The script rejects the version.
View raw message