hue is not allowed to impersonate (403)

[#1]

Hi!

this is what i have installed, from "About Hue" page:

Hue	2.6.1-3485
HDP	2.3.4
Hadoop	2.7.1
Pig	0.15.0
Hive-Hcatalog	1.2.1
Oozie	4.2.0
Ambari	2.2.1
HBase	1.1.2
Knox	0.6.0
Storm	0.10.0
Falcon	0.6.1

I have been trying to fix this error that shows whenever I try to access the filebrowser in HUE:

Traceback:
File "/usr/lib/hue/build/env/lib/python2.6/site-packages/Django-1.2.3-py2.6.egg/django/core/handlers/base.py" in get_response
  100.                     response = callback(request, *callback_args, **callback_kwargs)
File "/usr/lib/hue/apps/filebrowser/src/filebrowser/views.py" in index
  97.   if not request.fs.isdir(path):
File "/usr/lib/hue/desktop/libs/hadoop/src/hadoop/fs/webhdfs.py" in isdir
  220.     sb = self._stats(path)
File "/usr/lib/hue/desktop/libs/hadoop/src/hadoop/fs/webhdfs.py" in _stats
  205.       raise ex
Exception Type: WebHdfsException at /filebrowser/
Exception Value: SecurityException: Failed to obtain user group information: org.apache.hadoop.security.authorize.AuthorizationException: User: hue is not allowed to impersonate hue (error 403)

'hue' is the first user in hue, so it is superuser.

Installation and configuration, has been done following intructions in this link:

https://docs.hortonworks.com/../HDP-2.3.0/bk_installing_manually_book/../ch_installing_hue_chapter.h...

But i have tryed even cloudera's tuts, but didn't success.

What am I missing?

Can you help me fix this, so I can access filebrowser, hcatalog and beeswax...

[#2 · Accepted solution]

@Abiel Flrs The error "User: hue is not allowed to impersonate hue" also signifies that there is no home directory exist for user hue on HDFS.

You can do create (by logging in hdfs user)

su - hdfs -c "hdfs dfs -mkdir /user/hue"

su - hdfs -c "hdfs dfs -chown hue:hadoop /user/hue" [ Or you can make group owner as hdfs ]

su - hdfs -c "hdfs dfs -chmod 755 /user/hue"

means hue user belongs to group hadoop/hdfs

The other error (Only in case of secure Cluster ) ExceptionType:WebHdfsException Security exception may occur

if this is not set for WebHDFS Authorization: auth=KERBEROS;proxyuser=hue

If you are trying access hive by any chance from hue set this param hive.server2.enable.impersonation

[#3]

This helped me access HCatalog, and besswax, thank you.

In addition to your suggestion I also changed the datanode directories permissions from 750 to 755. Not sure if "not recommended".

But until now, I am unable to access the filebrowser...