question Unauthorized connection for super-user in Archives of Support Questions (Read Only)

Unauthorized connection for super-user

Hefei — Fri, 16 Sep 2022 09:56:45 GMT

Hi,

I want to run start a coordinator job, but I received the following error:

Error: E0501 : E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie from IP X.X.X.X

then, i added the properties in core-site.xml file, and restart the cluster, but didn't accomplish anything.

<property
    <name>hadoop.proxyuser.oozie.hosts</name>                                  
    <value>*</value>
</property>
<property>
    <name>hadoop.proxyuser.oozie.groups</name>
    <value>*</value>
</property>

How can i solve it ?

Re: Unauthorized connection for super-user

aervits — Tue, 12 Jan 2016 01:45:57 GMT

@Hefei Li

it has nothing to do with the proxyuser as you'd realized from your exercise, check the permissions in Oozie for the user you're executing the workflow with.

Re: Unauthorized connection for super-user

bsaini — Wed, 13 Jan 2016 23:48:29 GMT

@Hefei Li

The root cause of this issue is that the user you are using to run the workflow does not have permission to read the workflow.xml. Change the permissions on workflow.xml to 777 or 755 and try again.

Here is the method that is generating this error.

Re: Unauthorized connection for super-user

bsaini — Wed, 13 Jan 2016 23:49:21 GMT

Also make sure that the directories (absolute path) that contains the workflow.xml also has at least 755, so that the user is able to get to the file and then read it.

Re: Unauthorized connection for super-user

sdutta — Thu, 14 Jan 2016 00:21:31 GMT

@Hefei Li

Do you have knox or Ranger in your environwment?

Re: Unauthorized connection for super-user

mrakki3110 — Mon, 01 Feb 2016 22:43:45 GMT

@bsaini : I am trying out this tutorial mirroring-datasets-between-hadoop-clusters-with-apache-falcon You said that the path workflow.xml should have at least 755.I made these changes at 2 locations 1) /apps/data-mirroring/*.xml 2) /apps/falcon/backupCluster/staging/falcon/workflows/process/MirrorTest/cf29a6898f4d78c4515a7d0b22f51b6e_1454333601227/DEFAULT/ Now when I am running the Mirror Test, I am getting the following exception : Caused by: org.apache.hadoop.security.AccessControlException: Permission denied. user=ambari-qa is not the owner of inode=MirrorTest .What is going wrong ??

Re: Unauthorized connection for super-user

aervits — Mon, 01 Feb 2016 22:45:12 GMT

@Akshay Shingote chown on the MirrorTest directory and make sure ambari-qa is owner.

Re: Unauthorized connection for super-user

mrakki3110 — Tue, 02 Feb 2016 19:42:56 GMT

@bsaini @Artem Ervits : After making changes in core-site.xml Whenever I follow the steps,I see this exception occurs:Unauthorized connection for super-user: oozie from IP X.X.X.X & when I change its ownership to any other user then org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.AccessControlException): Permission denied. user=ambari-qa is not the owner of inode=MirrorTest occurs..After that if I change its ownership to "ambari-qa",then I again get Unauthorized connection for super-user: oozie from IP X.X.X.X.. Is there anything or a location I am missing some where wrong ?

Re: Unauthorized connection for super-user

SammyCloud — Tue, 13 Dec 2016 22:48:06 GMT

After the HDP installation 2.4, I had issue with similar error as

Unauthorized connection for super-user: oozie from IP..

As suggested above i made changes on proxyuser.oozie.hosts & group to *.

Additionally I had to copy shared library file to HDFS.

cd /tmp

tar xvf <HDP_install_dir>/oozie/oozie-sharelib.tar.gz

sudo -u oozie hadoop fs -put share /user/oozie/share

Now you can start Oozie from Ambari.

=========================

Another trouble shooting check is to find whether the DB is perfectly configured as per DB name,user & password specified in /etc/oozie/conf/oozie-site.xml

sudo -u oozie /usr/lib/oozie/bin/ooziedb.sh create -run

If it is perfectly configured it states that DB is configured.

In my installation I had to grant DB privileges to oozie user..

Re: Unauthorized connection for super-user

paul_fermor — Thu, 24 Aug 2017 00:12:26 GMT

Thanks - this problem was driving me nuts