Uploaded image for project: 'CDH (READ-ONLY)'
  1. CDH (READ-ONLY)
  2. DISTRO-334

Oozie -rerun option throws security error for non-secure hadop

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: CDH3u2
    • Fix Version/s: CDH4.0.0
    • Component/s: Oozie
    • Labels:
      None
    • Environment:
      RHEL5 was CDH3u0 and I upgraded to CDH3u2

      Description

      Job has ran:
      
      [training@localhost apps]$ oozie job -info 0000000-111028144631426-oozie-oozi-W
      Job ID : 0000000-111028144631426-oozie-oozi-W
      ------------------------------------------------------------------------------------------------------------------------------------
      Workflow Name : map-reduce-wf
      App Path      : hdfs://localhost:8020/user/training/mr-demo/job/workflow.xml
      Status        : SUCCEEDED
      Run           : 0
      User          : training
      Group         : users
      Created       : 2011-10-28 19:47
      Started       : 2011-10-28 19:47
      Last Modified : 2011-10-28 19:48
      Ended         : 2011-10-28 19:48
      
      Actions
      ------------------------------------------------------------------------------------------------------------------------------------
      ID                                                                            Status    Ext ID                 Ext Status Err Code  
      ------------------------------------------------------------------------------------------------------------------------------------
      0000000-111028144631426-oozie-oozi-W@mr-node                                  OK        job_201110281145_0003  SUCCEEDED  -         
      ------------------------------------------------------------------------------------------------------------------------------------
      
      But rerun fails:
      [training@localhost apps]$ oozie job -config mr-demo/job/job.properties -rerun 0000000-111028144631426-oozie-oozi-W
      Error: HTTP error code: 500 : Internal Server Error
      
      
      
      
      
      
      011-10-28 14:48:43,867 ERROR V1JobServlet:522 - USER[training]
      GROUP[users] TOKEN[-] APP[-] JOB[-] ACTION[-] URL[PUT
      http://localhost:11000/oozie/v1/job/0000000-111028144631426-oozie-oozi-W?action=rerun]
      error, Unknown exception in doAs
      java.lang.reflect.UndeclaredThrowableException: Unknown exception in doAs
             at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1139)
             at org.apache.oozie.service.KerberosHadoopAccessorService.createFileSystem(KerberosHadoopAccessorService.java:194)
             at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:283)
             at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:171)
             at org.apache.oozie.servlet.BaseJobServlet.doPut(BaseJobServlet.java:110)
             at javax.servlet.http.HttpServlet.service(HttpServlet.java:640)
             at org.apache.oozie.servlet.JsonRestServlet.service(JsonRestServlet.java:281)
             at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
             at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
             at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
             at org.apache.oozie.servlet.AuthFilter$2.doFilter(AuthFilter.java:123)
             at com.cloudera.alfredo.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:371)
             at org.apache.oozie.servlet.AuthFilter.doFilter(AuthFilter.java:128)
             at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
             at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
             at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
             at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
             at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
             at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
             at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
             at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
             at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
             at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
             at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
             at java.lang.Thread.run(Thread.java:662)
      - Hide quoted text -
      Caused by: java.security.PrivilegedActionException:
      org.apache.oozie.service.HadoopAccessorException: E0903: Configuration
      does not have Jobtracker Kerberos name or rule
             at java.security.AccessController.doPrivileged(Native Method)
             at javax.security.auth.Subject.doAs(Subject.java:396)
             at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1127)
             ... 24 more
      Caused by: org.apache.oozie.service.HadoopAccessorException: E0903:
      Configuration does not have Jobtracker Kerberos name or rule
             at org.apache.oozie.service.KerberosHadoopAccessorService.validateConf(KerberosHadoopAccessorService.java:244)
             at org.apache.oozie.service.KerberosHadoopAccessorService.access$000(KerberosHadoopAccessorService.java:49)
             at org.apache.oozie.service.KerberosHadoopAccessorService$3.run(KerberosHadoopAccessorService.java:202)
             at org.apache.oozie.service.KerberosHadoopAccessorService$3.run(KerberosHadoopAccessorService.java:194)
             ... 27 more
      
      

        Attachments

          Activity

            People

            • Assignee:
              tucu Alejandro Abdelnur
              Reporter:
              brock Brock Noland
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: