The Hortonworks Community Connection is now live. A completely rebuilt Q&A forum, Knowledge Base, Code Hub and more, backed by the experts in the industry.

You will be redirected here in 10 seconds. If your are not redirected, click here to visit the new site.

The legacy Hortonworks Forum is now closed. You can view a read-only version of the former site by clicking here. The site will be taken offline on January 31,2016

Oozie Forum

oozie is not allowed to impersonate

  • #49380
    Alex Martinez
    Participant

    Hello,
    I am attempting to submit an oozie job via my personal login credentials, and I get an error stating “JA002: User:oozie is not allowed to impersonate user ‘firstname_lastname’ ‘

    I had previously modified the Custom core-site.xml in HDFS via Ambari to reflect the following two changes:
    hadoop.proxyuser.oozie.groups = *
    hadoop.proxyuser.ooozie.hosts = *

    (I stopped the HDFS service and saved changes, and started service back up prior to testing)

    Additionally under oozie configuration in Ambari, I modified the following advanced variable:
    oozie.service.WorkflowAppService.system.libpath = /user/oozie/share/lib

    Any ideas would be appreciated. (This is for Hadoop 2.0 on a 10 node cluster)

  • Author
    Replies
  • #49381
    Alex Martinez
    Participant

    I also tried modifying the /etc/sudoers file to allow oozie to have ALL permissions like root as a quick test, but that did not work either.

    #69630
    Michał Ziemba
    Participant

    Hey, I have the same issue using falcon and oozie:

    2015-03-31 15:54:26,998 WARN ActionStartXCommand:544 – SERVER[***] USER[falcon] GROUP[-] TOKEN[] APP[FALCON_FEED_RETENTION_***] JOB[0000003-150331155334945-oozie-oozi-W] ACTION[0000003-150331155334945-oozie-oozi-W@eviction] Error starting action [eviction]. ErrorType [NON_TRANSIENT], ErrorCode [JA002], Message [JA002: User: oozie is not allowed to impersonate falcon]
    org.apache.oozie.action.ActionExecutorException: JA002: User: oozie is not allowed to impersonate falcon
    at org.apache.oozie.action.ActionExecutor.convertExceptionHelper(ActionExecutor.java:418)
    at org.apache.oozie.action.ActionExecutor.convertException(ActionExecutor.java:392)
    at org.apache.oozie.action.hadoop.JavaActionExecutor.submitLauncher(JavaActionExecutor.java:990)
    at org.apache.oozie.action.hadoop.JavaActionExecutor.start(JavaActionExecutor.java:1145)
    at org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:228)
    at org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:63)
    at org.apache.oozie.command.XCommand.call(XCommand.java:281)
    at org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:323)
    at org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:252)
    at org.apache.oozie.service.CallableQueueService$CallableWrapper.run(CallableQueueService.java:174)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:745)

    Did you manage to solve this? Any help would be appreciated.

    #72290
    Sanjeev T
    Participant

    michal, in oozie-site.xml

    you need to add property

    oozie.service.ProxyUserService.proxyuser.falcon.hosts
    and
    oozie.service.ProxyUserService.proxyuser.falcon.groups

    for falcon it will allow to schedule/run via oozie

The forum ‘Oozie’ is closed to new topics and replies.

Support from the Experts

A HDP Support Subscription connects you experts with deep experience running Apache Hadoop in production, at-scale on the most demanding workloads.

Enterprise Support »

Become HDP Certified

Real world training designed by the core architects of Hadoop. Scenario-based training courses are available in-classroom or online from anywhere in the world

Training »

Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.