I've the following issue with oozie since I enabled kerberos security.
I can use the oozie client in the server which have oozie server running, but I'm not able to use it from anywhere else.
When I try to do it I got the following error:
[email@example.com ~]$ kinit admin@TEST.INT Password for admin@TEST.INT: [firstname.lastname@example.org ~]$ klist Ticket cache: FILE:/tmp/krb5cc_1008 Default principal: admin@TEST.INT Valid starting Expires Service principal 05/16/17 20:13:59 05/17/17 06:14:20 krbtgt/TEST.INT@TEST.INT renew until 05/23/17 20:13:59 [email@example.com ~]$ oozie jobs -oozie http://node01.int:11000/oozie Error: IO_ERROR : java.io.IOException: Error while connecting Oozie server. No of retries = 1. Exception = Could not authenticate, GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) [firstname.lastname@example.org ~]$
At start I thought that it could be because in the core-site.xml I had "hadoop.proxyuser.oozie.hosts=node01.int" but I changed it to "hadoop.proxyuser.oozie.hosts=*" fully restarted the cluster and the issue persist.
Any clue about what is happening?
Thank you in advance!
Finally I solved it,
It was a problem with jre unlimited encryption, the java alternatives in the OS was pointing to other Oracle JDK without it, looks like oozie client doesn't get the JAVA_HOME from configurations provided by ambari.