Can't get Oozie web UI configured

[#1]

Trying to get the oozie web ui up through cloudera manager, followed instructions here:

http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.6.3/Cloudera-Manager-Managin...

no luck.

Any suggestions appreciated.

Thanks.

BC

[#2]

I think you might have to use either a certificate from a Certificate Authority or a Self-Signed Certificate. Using a self-signed certificate requires some additional configuration on each Oozie client machine.
see https://oozie.apache.org/docs/3.3.2/AG_Install.html#Connect_to_the_Oozie_Web_UI_using_SSL_HTTPS

[#3]

Well that seems complicated:)

Sure that this is not a configuration problem with the cloudera manager rather than certs?

[#4]

if you able to use oozie workflow from CLI then it is not a problem with the configuration...

[#5]

I also ran into this issue on a Kerberos secured CDH5.1 cluster.  After making the following changes to the Oozie configuration via Cloudera Manager, I am able to bring the browser up (may not be suitable for production):

Property: Oozie Server Advanced Configuration Snippet (Safety Valve) for oozie-site.xml 

<property>
  <name>oozie.authentication.type</name>
  <value>simple</value>
</property>
<property>
  <name>oozie.authentication.token.validity</name>
  <value>36000</value>
</property>
<property>
  <name>oozie.authentication.cookie.domain</name>
  <value>example.com</value>
</property>

[#6 · Accepted solution]

Ignore my previous reply.  Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide:  http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-f...

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following:  CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.