Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Can't get Oozie web UI configured

avatar
Explorer

Trying to get the oozie web ui up through cloudera manager, followed instructions here:

http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.6.3/Cloudera-Manager-Managin...

 

no luck.

 


Any suggestions appreciated.

Thanks.

BC

 

 

1 ACCEPTED SOLUTION

avatar
Explorer

Ignore my previous reply.  Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

 

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide:  http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-f...

 

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following:  CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

 

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.

View solution in original post

5 REPLIES 5

avatar
Expert Contributor
I think you might have to use either a certificate from a Certificate Authority or a Self-Signed Certificate. Using a self-signed certificate requires some additional configuration on each Oozie client machine.
see https://oozie.apache.org/docs/3.3.2/AG_Install.html#Connect_to_the_Oozie_Web_UI_using_SSL_HTTPS
Em Jay

avatar
Explorer

Well that seems complicated:)

 

Sure that this is not a configuration problem with the cloudera manager rather than certs?

 

avatar
Expert Contributor
if you able to use oozie workflow from CLI then it is not a problem with the configuration...
Em Jay

avatar
Explorer

I also ran into this issue on a Kerberos secured CDH5.1 cluster.  After making the following changes to the Oozie configuration via Cloudera Manager, I am able to bring the browser up (may not be suitable for production):

 

Property: Oozie Server Advanced Configuration Snippet (Safety Valve) for oozie-site.xml 

 

<property>
  <name>oozie.authentication.type</name>
  <value>simple</value>
</property>
<property>
  <name>oozie.authentication.token.validity</name>
  <value>36000</value>
</property>
<property>
  <name>oozie.authentication.cookie.domain</name>
  <value>example.com</value>
</property>

avatar
Explorer

Ignore my previous reply.  Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

 

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide:  http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-f...

 

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following:  CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

 

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.