Support Questions
Find answers, ask questions, and share your expertise

Oozie only accessible from the oozie-server node

Expert Contributor

Hello community,

I've the following issue with oozie since I enabled kerberos security.

I can use the oozie client in the server which have oozie server running, but I'm not able to use it from anywhere else.

When I try to do it I got the following error:

[ ~]$ kinit admin@TEST.INT
Password for admin@TEST.INT:
[ ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_1008
Default principal: admin@TEST.INT
Valid starting     Expires            Service principal
05/16/17 20:13:59  05/17/17 06:14:20  krbtgt/TEST.INT@TEST.INT
        renew until 05/23/17 20:13:59
[ ~]$ oozie jobs -oozie
Error: IO_ERROR : Error while connecting Oozie server. No of retries = 1. Exception = Could not authenticate, GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)
[ ~]$

At start I thought that it could be because in the core-site.xml I had "" but I changed it to "hadoop.proxyuser.oozie.hosts=*" fully restarted the cluster and the issue persist.

Any clue about what is happening?

Thank you in advance!


Expert Contributor

Finally I solved it,

It was a problem with jre unlimited encryption, the java alternatives in the OS was pointing to other Oracle JDK without it, looks like oozie client doesn't get the JAVA_HOME from configurations provided by ambari.