You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@oozie.apache.org by Lenin Raj <em...@gmail.com> on 2013/06/02 10:26:38 UTC
Allowing Impersonation
Hello,
When I try to invoke a job, I am getting impersonation error. I tried
searching in Google, but could not resolve it.
*This is my core-site.xml:*
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
<!-- Put site-specific property overrides in this file. -->
<configuration>
<property>
<name>hadoop.tmp.dir</name>
<value>/app/hadoop/tmp</value>
<description>A base for other temporary directories.</description>
</property>
<property>
<name>fs.default.name</name>
<value>hdfs://localhost:54310</value>
<description>The name of the default file system. A URI whose
scheme and authority determine the FileSystem implementation. The
uri's scheme determines the config property (fs.SCHEME.impl) naming
the FileSystem implementation class. The uri's authority is used to
determine the host, port, etc. for a filesystem.</description>
</property>
<!-- OOZIE -->
* <property>
<name>hadoop.proxyuser.oozieuser.hosts</name>
<value>localhost</value>
</property>
<property>
<name>hadoop.proxyuser.oozieuser.groups</name>
<value>*</value>
</property>*
</configuration>
*I have restarted hadoop after modifying core-site.xml.*
I am starting oozie server using the user id 'oozieuser'
*Job run via root*
Error: E0902 : E0902: Exception occured: [User: oozieuser is not allowed to
impersonate root]
*Job run via oozieuser*
Error: E0902 : E0902: Exception occured: [User: oozieuser is not allowed to
impersonate oozieuser]
If I am starting oozie server using the user id 'root'
*Job run via root*
Error: E0902 : E0902: Exception occured: [User: root is not allowed to
impersonate root]
*Job run via oozieuser*
Error: E0902 : E0902: Exception occured: [User: root is not allowed to
impersonate oozieuser]
*Is my core-site.xml configuration correct? If not what should be modified?*
Thanks,
Lenin
Re: Allowing Impersonation
Posted by Alejandro Abdelnur <tu...@gmail.com>.
Lenin,
It should the unix username that is running the oozie server.
thanks
On Mon, Jun 3, 2013 at 8:35 PM, Lenin Raj <em...@gmail.com> wrote:
> Thanks Roman. Can you please suggest the recommended way to do
> impersonation in this Hadoop version?
>
> What should I replace * with? I tried replacing * with root, but didn't
> help.
> --
> Lenin.
> On Jun 3, 2013 10:19 PM, "Roman Shaposhnik" <rv...@apache.org> wrote:
>
> > On Sun, Jun 2, 2013 at 10:17 AM, Lenin Raj <em...@gmail.com> wrote:
> > > Hi Roman,
> > >
> > > Does 1.0.4 support wildcards?
> >
> > I believe the JIRA you're looking for is: HADOOP-6995
> > According to JIRA and CHANGES.txt this functionality
> > is only present in Hadoop 2.x and Hadoop 1.1.x
> >
> > Thanks,
> > Roman.
> >
>
Re: Allowing Impersonation
Posted by Lenin Raj <em...@gmail.com>.
Thanks Roman. Can you please suggest the recommended way to do
impersonation in this Hadoop version?
What should I replace * with? I tried replacing * with root, but didn't
help.
--
Lenin.
On Jun 3, 2013 10:19 PM, "Roman Shaposhnik" <rv...@apache.org> wrote:
> On Sun, Jun 2, 2013 at 10:17 AM, Lenin Raj <em...@gmail.com> wrote:
> > Hi Roman,
> >
> > Does 1.0.4 support wildcards?
>
> I believe the JIRA you're looking for is: HADOOP-6995
> According to JIRA and CHANGES.txt this functionality
> is only present in Hadoop 2.x and Hadoop 1.1.x
>
> Thanks,
> Roman.
>
Re: Allowing Impersonation
Posted by Roman Shaposhnik <rv...@apache.org>.
On Sun, Jun 2, 2013 at 10:17 AM, Lenin Raj <em...@gmail.com> wrote:
> Hi Roman,
>
> Does 1.0.4 support wildcards?
I believe the JIRA you're looking for is: HADOOP-6995
According to JIRA and CHANGES.txt this functionality
is only present in Hadoop 2.x and Hadoop 1.1.x
Thanks,
Roman.
Re: Allowing Impersonation
Posted by Lenin Raj <em...@gmail.com>.
Hi Roman,
Does 1.0.4 support wildcards?
What are the ways to debug this issue?
PS - oozieuser is a member of the root group.
root@li339-83:/usr/local/oozie/oozie/distro/target/oozie-3.3.2-distro/oozie-3.3.2#
groups oozieuser
oozieuser : oozieg root
Thanks,
Lenin
On Sun, Jun 2, 2013 at 10:43 PM, Lenin Raj <em...@gmail.com> wrote:
> Hi Roman,
>
> My Hadoop Version is *1.0.4*
>
> root@li339-83:/usr/local/hadoop/hadoop/conf# hadoop version
> Warning: $HADOOP_HOME is deprecated.
>
> *Hadoop 1.0.4*
> Subversion
> https://svn.apache.org/repos/asf/hadoop/common/branches/branch-1.0 -r
> 1393290
> Compiled by hortonfo on Wed Oct 3 05:13:58 UTC 2012
> From source with checksum fe2baea87c4c81a2c505767f3f9b71f4
> root@li339-83:/usr/local/hadoop/hadoop/conf#
>
>
>
> Thanks,
> Lenin
>
>
> On Sun, Jun 2, 2013 at 10:41 PM, Roman Shaposhnik <rv...@apache.org> wrote:
>
>> What version of Hadoop are you using? Not all versions
>> support wildcards (e.g. '*') as part of
>> hadoop.proxyuser.oozieuser.[groups|hosts]
>>
>> Thanks,
>> Roman.
>>
>> On Sun, Jun 2, 2013 at 1:26 AM, Lenin Raj <em...@gmail.com> wrote:
>> > Hello,
>> >
>> > When I try to invoke a job, I am getting impersonation error. I tried
>> > searching in Google, but could not resolve it.
>> >
>> > *This is my core-site.xml:*
>> >
>> > <?xml version="1.0"?>
>> > <?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
>> >
>> > <!-- Put site-specific property overrides in this file. -->
>> >
>> > <configuration>
>> > <property>
>> > <name>hadoop.tmp.dir</name>
>> > <value>/app/hadoop/tmp</value>
>> > <description>A base for other temporary directories.</description>
>> > </property>
>> >
>> > <property>
>> > <name>fs.default.name</name>
>> > <value>hdfs://localhost:54310</value>
>> > <description>The name of the default file system. A URI whose
>> > scheme and authority determine the FileSystem implementation. The
>> > uri's scheme determines the config property (fs.SCHEME.impl) naming
>> > the FileSystem implementation class. The uri's authority is used to
>> > determine the host, port, etc. for a filesystem.</description>
>> > </property>
>> > <!-- OOZIE -->
>> > * <property>
>> > <name>hadoop.proxyuser.oozieuser.hosts</name>
>> > <value>localhost</value>
>> > </property>
>> > <property>
>> > <name>hadoop.proxyuser.oozieuser.groups</name>
>> > <value>*</value>
>> > </property>*
>> > </configuration>
>> >
>> > *I have restarted hadoop after modifying core-site.xml.*
>> >
>> > I am starting oozie server using the user id 'oozieuser'
>> >
>> > *Job run via root*
>> > Error: E0902 : E0902: Exception occured: [User: oozieuser is not
>> allowed to
>> > impersonate root]
>> >
>> > *Job run via oozieuser*
>> > Error: E0902 : E0902: Exception occured: [User: oozieuser is not
>> allowed to
>> > impersonate oozieuser]
>> >
>> > If I am starting oozie server using the user id 'root'
>> >
>> > *Job run via root*
>> > Error: E0902 : E0902: Exception occured: [User: root is not allowed to
>> > impersonate root]
>> >
>> > *Job run via oozieuser*
>> > Error: E0902 : E0902: Exception occured: [User: root is not allowed to
>> > impersonate oozieuser]
>> >
>> > *Is my core-site.xml configuration correct? If not what should be
>> modified?*
>> >
>> > Thanks,
>> > Lenin
>>
>
>
Re: Allowing Impersonation
Posted by Lenin Raj <em...@gmail.com>.
Hi Roman,
My Hadoop Version is *1.0.4*
root@li339-83:/usr/local/hadoop/hadoop/conf# hadoop version
Warning: $HADOOP_HOME is deprecated.
*Hadoop 1.0.4*
Subversion
https://svn.apache.org/repos/asf/hadoop/common/branches/branch-1.0 -r
1393290
Compiled by hortonfo on Wed Oct 3 05:13:58 UTC 2012
>From source with checksum fe2baea87c4c81a2c505767f3f9b71f4
root@li339-83:/usr/local/hadoop/hadoop/conf#
Thanks,
Lenin
On Sun, Jun 2, 2013 at 10:41 PM, Roman Shaposhnik <rv...@apache.org> wrote:
> What version of Hadoop are you using? Not all versions
> support wildcards (e.g. '*') as part of
> hadoop.proxyuser.oozieuser.[groups|hosts]
>
> Thanks,
> Roman.
>
> On Sun, Jun 2, 2013 at 1:26 AM, Lenin Raj <em...@gmail.com> wrote:
> > Hello,
> >
> > When I try to invoke a job, I am getting impersonation error. I tried
> > searching in Google, but could not resolve it.
> >
> > *This is my core-site.xml:*
> >
> > <?xml version="1.0"?>
> > <?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
> >
> > <!-- Put site-specific property overrides in this file. -->
> >
> > <configuration>
> > <property>
> > <name>hadoop.tmp.dir</name>
> > <value>/app/hadoop/tmp</value>
> > <description>A base for other temporary directories.</description>
> > </property>
> >
> > <property>
> > <name>fs.default.name</name>
> > <value>hdfs://localhost:54310</value>
> > <description>The name of the default file system. A URI whose
> > scheme and authority determine the FileSystem implementation. The
> > uri's scheme determines the config property (fs.SCHEME.impl) naming
> > the FileSystem implementation class. The uri's authority is used to
> > determine the host, port, etc. for a filesystem.</description>
> > </property>
> > <!-- OOZIE -->
> > * <property>
> > <name>hadoop.proxyuser.oozieuser.hosts</name>
> > <value>localhost</value>
> > </property>
> > <property>
> > <name>hadoop.proxyuser.oozieuser.groups</name>
> > <value>*</value>
> > </property>*
> > </configuration>
> >
> > *I have restarted hadoop after modifying core-site.xml.*
> >
> > I am starting oozie server using the user id 'oozieuser'
> >
> > *Job run via root*
> > Error: E0902 : E0902: Exception occured: [User: oozieuser is not allowed
> to
> > impersonate root]
> >
> > *Job run via oozieuser*
> > Error: E0902 : E0902: Exception occured: [User: oozieuser is not allowed
> to
> > impersonate oozieuser]
> >
> > If I am starting oozie server using the user id 'root'
> >
> > *Job run via root*
> > Error: E0902 : E0902: Exception occured: [User: root is not allowed to
> > impersonate root]
> >
> > *Job run via oozieuser*
> > Error: E0902 : E0902: Exception occured: [User: root is not allowed to
> > impersonate oozieuser]
> >
> > *Is my core-site.xml configuration correct? If not what should be
> modified?*
> >
> > Thanks,
> > Lenin
>
Re: Allowing Impersonation
Posted by Roman Shaposhnik <rv...@apache.org>.
What version of Hadoop are you using? Not all versions
support wildcards (e.g. '*') as part of
hadoop.proxyuser.oozieuser.[groups|hosts]
Thanks,
Roman.
On Sun, Jun 2, 2013 at 1:26 AM, Lenin Raj <em...@gmail.com> wrote:
> Hello,
>
> When I try to invoke a job, I am getting impersonation error. I tried
> searching in Google, but could not resolve it.
>
> *This is my core-site.xml:*
>
> <?xml version="1.0"?>
> <?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
>
> <!-- Put site-specific property overrides in this file. -->
>
> <configuration>
> <property>
> <name>hadoop.tmp.dir</name>
> <value>/app/hadoop/tmp</value>
> <description>A base for other temporary directories.</description>
> </property>
>
> <property>
> <name>fs.default.name</name>
> <value>hdfs://localhost:54310</value>
> <description>The name of the default file system. A URI whose
> scheme and authority determine the FileSystem implementation. The
> uri's scheme determines the config property (fs.SCHEME.impl) naming
> the FileSystem implementation class. The uri's authority is used to
> determine the host, port, etc. for a filesystem.</description>
> </property>
> <!-- OOZIE -->
> * <property>
> <name>hadoop.proxyuser.oozieuser.hosts</name>
> <value>localhost</value>
> </property>
> <property>
> <name>hadoop.proxyuser.oozieuser.groups</name>
> <value>*</value>
> </property>*
> </configuration>
>
> *I have restarted hadoop after modifying core-site.xml.*
>
> I am starting oozie server using the user id 'oozieuser'
>
> *Job run via root*
> Error: E0902 : E0902: Exception occured: [User: oozieuser is not allowed to
> impersonate root]
>
> *Job run via oozieuser*
> Error: E0902 : E0902: Exception occured: [User: oozieuser is not allowed to
> impersonate oozieuser]
>
> If I am starting oozie server using the user id 'root'
>
> *Job run via root*
> Error: E0902 : E0902: Exception occured: [User: root is not allowed to
> impersonate root]
>
> *Job run via oozieuser*
> Error: E0902 : E0902: Exception occured: [User: root is not allowed to
> impersonate oozieuser]
>
> *Is my core-site.xml configuration correct? If not what should be modified?*
>
> Thanks,
> Lenin