Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

oozie4.3 with kerberos: I use oozie in kerberos hava a wrong

oozie4.3 with kerberos: I use oozie in kerberos hava a wrong

Contributor

wrong log:

Error: IO_ERROR : java.io.IOException: Error while connecting Oozie server. No of retries = 1. Exception = Could not authenticate, Authentication failed, status: 302, message: Found

oozie-site.xml:

  <property>
	    <name>oozie.service.HadoopAccessorService.kerberos.enabled</name>
	    <value>true</value>
	    </property>
	    <property>
	    <name>local.realm</name>
	    <value>HADOOP.COM</value>
	    </property>
	    <property>
	    <name>oozie.service.HadoopAccessorService.keytab.file</name>
	    <value>/usr/lib/cluster001/oozie-4.3.0/conf/oozie-http.keytab</value>
	    </property>
	    <property>
	    <name>oozie.service.HadoopAccessorService.kerberos.principal</name>
	    <value>oozie/ds1@HADOOP.COM</value>
	    </property>
	    <property>
	    <name>oozie.authentication.type</name>
	    <value>kerberos</value>
	    </property>


 <property>
	    <name>oozie.authentication.kerberos.principal</name>
	    <value>HTTP/ds1@HADOOP.COM</value>
	    </property>
	   
	    <property>
	    <name>oozie.authentication.kerberos.name.rules</name>
	    <value>DEFAULT</value>
	    </property>

keytab:(ds1上运行oozie-server,I have test this tap,It is successd)

[root@ds1 conf]# klist -e -k -t oozie-http.keytab 
Keytab name: FILE:oozie-http.keytab
KVNO Timestamp         Principal
---- ----------------- --------------------------------------------------------
   1 09/05/18 14:56:16 oozie/ds1@HADOOP.COM (aes256-cts-hmac-sha1-96) 
   1 09/05/18 14:56:16 oozie/ds1@HADOOP.COM (aes128-cts-hmac-sha1-96) 
   2 09/05/18 14:56:16 HTTP/ds1@HADOOP.COM (aes256-cts-hmac-sha1-96) 
   2 09/05/18 14:56:16 HTTP/ds1@HADOOP.COM (aes128-cts-hmac-sha1-96) 
   1 09/06/18 19:43:58 oozie/ds1@HADOOP.COM (aes256-cts-hmac-sha1-96) 
   1 09/06/18 19:43:58 oozie/ds1@HADOOP.COM (aes128-cts-hmac-sha1-96) 
   2 09/06/18 19:43:58 HTTP/ds1@HADOOP.COM (aes256-cts-hmac-sha1-96) 
   2 09/06/18 19:43:58 HTTP/ds1@HADOOP.COM (aes128-cts-hmac-sha1-96) 
1 REPLY 1
Highlighted

Re: oozie4.3 with kerberos: I use oozie in kerberos hava a wrong

Contributor

run:oozie admin -oozie http://localhost:11000/oozie -status have the question