Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Can't get Oozie web UI configured

Solved Go to solution
Highlighted

Can't get Oozie web UI configured

Explorer

Trying to get the oozie web ui up through cloudera manager, followed instructions here:

http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.6.3/Cloudera-Manager-Managin...

 

no luck.

 


Any suggestions appreciated.

Thanks.

BC

 

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Can't get Oozie web UI configured

Explorer

Ignore my previous reply.  Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

 

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide:  http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-f...

 

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following:  CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

 

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.

View solution in original post

5 REPLIES 5

Re: Can't get Oozie web UI configured

Expert Contributor
I think you might have to use either a certificate from a Certificate Authority or a Self-Signed Certificate. Using a self-signed certificate requires some additional configuration on each Oozie client machine.
see https://oozie.apache.org/docs/3.3.2/AG_Install.html#Connect_to_the_Oozie_Web_UI_using_SSL_HTTPS
Em Jay
Highlighted

Re: Can't get Oozie web UI configured

Explorer

Well that seems complicated:)

 

Sure that this is not a configuration problem with the cloudera manager rather than certs?

 

Highlighted

Re: Can't get Oozie web UI configured

Expert Contributor
if you able to use oozie workflow from CLI then it is not a problem with the configuration...
Em Jay
Highlighted

Re: Can't get Oozie web UI configured

Explorer

I also ran into this issue on a Kerberos secured CDH5.1 cluster.  After making the following changes to the Oozie configuration via Cloudera Manager, I am able to bring the browser up (may not be suitable for production):

 

Property: Oozie Server Advanced Configuration Snippet (Safety Valve) for oozie-site.xml 

 

<property>
  <name>oozie.authentication.type</name>
  <value>simple</value>
</property>
<property>
  <name>oozie.authentication.token.validity</name>
  <value>36000</value>
</property>
<property>
  <name>oozie.authentication.cookie.domain</name>
  <value>example.com</value>
</property>

Highlighted

Re: Can't get Oozie web UI configured

Explorer

Ignore my previous reply.  Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

 

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide:  http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-f...

 

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following:  CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

 

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.

View solution in original post

Don't have an account?
Coming from Hortonworks? Activate your account here