Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Oozie only accessible from the oozie-server node

Highlighted

Oozie only accessible from the oozie-server node

Expert Contributor

Hello community,

I've the following issue with oozie since I enabled kerberos security.

I can use the oozie client in the server which have oozie server running, but I'm not able to use it from anywhere else.

When I try to do it I got the following error:

[admin@node02.int ~]$ kinit admin@TEST.INT
Password for admin@TEST.INT:
[admin@node02.int ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_1008
Default principal: admin@TEST.INT
Valid starting     Expires            Service principal
05/16/17 20:13:59  05/17/17 06:14:20  krbtgt/TEST.INT@TEST.INT
        renew until 05/23/17 20:13:59
[admin@node02.int ~]$ oozie jobs -oozie http://node01.int:11000/oozie
Error: IO_ERROR : java.io.IOException: Error while connecting Oozie server. No of retries = 1. Exception = Could not authenticate, GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)
[admin@node02.int ~]$

At start I thought that it could be because in the core-site.xml I had "hadoop.proxyuser.oozie.hosts=node01.int" but I changed it to "hadoop.proxyuser.oozie.hosts=*" fully restarted the cluster and the issue persist.

Any clue about what is happening?

Thank you in advance!

1 REPLY 1

Re: Oozie only accessible from the oozie-server node

Expert Contributor

Finally I solved it,

It was a problem with jre unlimited encryption, the java alternatives in the OS was pointing to other Oracle JDK without it, looks like oozie client doesn't get the JAVA_HOME from configurations provided by ambari.

Don't have an account?
Coming from Hortonworks? Activate your account here