oozie is not allowed to impersonate

to create new topics or reply. | New User Registration

This topic contains 3 replies, has 3 voices, and was last updated by  Sanjeev T 1 month, 1 week ago.

  • Creator
    Topic
  • #49380

    Alex Martinez
    Participant

    Hello,
    I am attempting to submit an oozie job via my personal login credentials, and I get an error stating “JA002: User:oozie is not allowed to impersonate user ‘firstname_lastname’ ‘

    I had previously modified the Custom core-site.xml in HDFS via Ambari to reflect the following two changes:
    hadoop.proxyuser.oozie.groups = *
    hadoop.proxyuser.ooozie.hosts = *

    (I stopped the HDFS service and saved changes, and started service back up prior to testing)

    Additionally under oozie configuration in Ambari, I modified the following advanced variable:
    oozie.service.WorkflowAppService.system.libpath = /user/oozie/share/lib

    Any ideas would be appreciated. (This is for Hadoop 2.0 on a 10 node cluster)

Viewing 3 replies - 1 through 3 (of 3 total)

You must be to reply to this topic. | Create Account

  • Author
    Replies
  • #72290

    Sanjeev T
    Participant

    michal, in oozie-site.xml

    you need to add property

    oozie.service.ProxyUserService.proxyuser.falcon.hosts
    and
    oozie.service.ProxyUserService.proxyuser.falcon.groups

    for falcon it will allow to schedule/run via oozie

    Collapse
    #69630

    Michał Ziemba
    Participant

    Hey, I have the same issue using falcon and oozie:

    2015-03-31 15:54:26,998 WARN ActionStartXCommand:544 – SERVER[***] USER[falcon] GROUP[-] TOKEN[] APP[FALCON_FEED_RETENTION_***] JOB[0000003-150331155334945-oozie-oozi-W] ACTION[0000003-150331155334945-oozie-oozi-W@eviction] Error starting action [eviction]. ErrorType [NON_TRANSIENT], ErrorCode [JA002], Message [JA002: User: oozie is not allowed to impersonate falcon]
    org.apache.oozie.action.ActionExecutorException: JA002: User: oozie is not allowed to impersonate falcon
    at org.apache.oozie.action.ActionExecutor.convertExceptionHelper(ActionExecutor.java:418)
    at org.apache.oozie.action.ActionExecutor.convertException(ActionExecutor.java:392)
    at org.apache.oozie.action.hadoop.JavaActionExecutor.submitLauncher(JavaActionExecutor.java:990)
    at org.apache.oozie.action.hadoop.JavaActionExecutor.start(JavaActionExecutor.java:1145)
    at org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:228)
    at org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:63)
    at org.apache.oozie.command.XCommand.call(XCommand.java:281)
    at org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:323)
    at org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:252)
    at org.apache.oozie.service.CallableQueueService$CallableWrapper.run(CallableQueueService.java:174)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:745)

    Did you manage to solve this? Any help would be appreciated.

    Collapse
    #49381

    Alex Martinez
    Participant

    I also tried modifying the /etc/sudoers file to allow oozie to have ALL permissions like root as a quick test, but that did not work either.

    Collapse
Viewing 3 replies - 1 through 3 (of 3 total)
Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.