question Re: Can't get Oozie web UI configured in Archives of Support Questions (Read Only)

Can't get Oozie web UI configured

b3cobb — Fri, 16 Sep 2022 08:51:45 GMT

Trying to get the oozie web ui up through cloudera manager, followed instructions here:

http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.6.3/Cloudera-Manager-Managing-Clusters/cmmc_oozie_service.html

no luck.

Any suggestions appreciated.

Thanks.

Re: Can't get Oozie web UI configured

Manikumar Juttukonda — Mon, 23 Dec 2013 20:28:35 GMT

I think you might have to use either a certificate from a Certificate Authority or a Self-Signed Certificate. Using a self-signed certificate requires some additional configuration on each Oozie client machine.
see https://oozie.apache.org/docs/3.3.2/AG_Install.html#Connect_to_the_Oozie_Web_UI_using_SSL_HTTPS

Re: Can't get Oozie web UI configured

b3cobb — Thu, 26 Dec 2013 23:07:40 GMT

Well that seems complicated:)

Sure that this is not a configuration problem with the cloudera manager rather than certs?

Re: Can't get Oozie web UI configured

Manikumar Juttukonda — Fri, 27 Dec 2013 15:19:41 GMT

if you able to use oozie workflow from CLI then it is not a problem with the configuration...

Re: Can't get Oozie web UI configured

CZezula — Thu, 04 Sep 2014 17:12:00 GMT

I also ran into this issue on a Kerberos secured CDH5.1 cluster. After making the following changes to the Oozie configuration via Cloudera Manager, I am able to bring the browser up (may not be suitable for production):

Property: Oozie Server Advanced Configuration Snippet (Safety Valve) for oozie-site.xml

<property>
<name>oozie.authentication.type</name>
<value>simple</value>
</property>
<property>
<name>oozie.authentication.token.validity</name>
<value>36000</value>
</property>
<property>
<name>oozie.authentication.cookie.domain</name>
<value>example.com</value>
</property>

Re: Can't get Oozie web UI configured

CZezula — Tue, 09 Sep 2014 22:15:17 GMT

Ignore my previous reply. Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide: http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-for-Impala-Install-Guide.pdf

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following: CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.