I've the following issue with oozie since I enabled kerberos security.
I can use the oozie client in the server which have oozie server running, but I'm not able to use it from anywhere else.
When I try to do it I got the following error:
[email@example.com ~]$ kinit admin@TEST.INT
Password for admin@TEST.INT:
[firstname.lastname@example.org ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_1008
Default principal: admin@TEST.INT
Valid starting Expires Service principal
05/16/17 20:13:59 05/17/17 06:14:20 krbtgt/TEST.INT@TEST.INT
renew until 05/23/17 20:13:59
[email@example.com ~]$ oozie jobs -oozie http://node01.int:11000/oozie
Error: IO_ERROR : java.io.IOException: Error while connecting Oozie server. No of retries = 1. Exception = Could not authenticate, GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)
At start I thought that it could be because in the core-site.xml I had "hadoop.proxyuser.oozie.hosts=node01.int" but I changed it to "hadoop.proxyuser.oozie.hosts=*" fully restarted the cluster and the issue persist.
It was a problem with jre unlimited encryption, the java alternatives in the OS was pointing to other Oracle JDK without it, looks like oozie client doesn't get the JAVA_HOME from configurations provided by ambari.