Uploaded image for project: 'Hue'
  1. Hue
  2. HUE-1003

Java actions are not authenticating properly on kerberos-enabled clusters, fails to run MR jobs

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: 2.1.0
    • Fix Version/s: None
    • Component/s: app.editor, con.oozie
    • Labels:
      None

      Description

      I have a CM-managed secure cluster. The KT renewer appears to be operational, and the hue princ looks valid in the KDC. Access to filebrowser via webhdfs also works. However, I'm still encountering the following error when trying to run a java-action job (either Job Designer or Oozie will do, try the Sequential Java sample workflow):

      Delegation Token can be issued only with kerberos or web authentication at 
      org.apache.hadoop.hdfs.server.namenode.FSNamesystem.getDelegationToken(FSNamesystem.java:5197) at 
      org.apache.hadoop.hdfs.server.namenode.NameNodeRpcServer.getDelegationToken(NameNodeRpcServer.java:372) at 
      org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolServerSideTranslatorPB.getDelegationToken(ClientNamenodeProtocolServerSideTranslatorPB.java:797) at 
      org.apache.hadoop.hdfs.protocol.proto.ClientNamenodeProtocolProtos$ClientNamenodeProtocol$2.callBlockingMethod(ClientNamenodeProtocolProtos.java:44148) at 
      org.apache.hadoop.ipc.ProtobufRpcEngine$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine.java:453) at 
      org.apache.hadoop.ipc.RPC$Server.call(RPC.java:1002) at 
      org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:1695) at 
      org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:1691) at java.security.AccessController.doPrivileged(Native Method) at 
      javax.security.auth.Subject.doAs(Subject.java:396) at 
      org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1371) at org.apache.hadoop.ipc.Server$Handler.run(Server.java:1689)
      

      This problem only applies to Java actions; the Mapreduce action works properly.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                romain Romain Rigaux
                Reporter:
                ebwong Eric Wong
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: