[jira] [Commented] (OOZIE-800) Job start/kill gives authorization error

["Kevin Risden (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OOZIE-800?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14219754#comment-14219754 ] 

Kevin Risden commented on OOZIE-800:
------------------------------------

This error can be caused by the .oozie-auth-token being expired.

Excerpt from: http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.1.2/bk_releasenotes_hdp_2.1/content/ch_relnotes-hdpch_relnotes-hdp-2.1.2-knownissues-oozie.html
{quote}
BUG-16397: Documentation does not describe how to renew an expired Oozie authorization token.

Problem: Due to the introduction of HADOOP-10416, users may encounter situations where they are not authorized to perform certain actions because they are in an unsecured environment and their Oozie authorization token has expired.

Workaround: Remove the oozie auth token cache file at System.gettProperty("user.home")/.oozie-auth-token, then re-run the Oozie command to renew the token.
{quote}

> Job start/kill gives authorization error
> ----------------------------------------
>
>                 Key: OOZIE-800
>                 URL: https://issues.apache.org/jira/browse/OOZIE-800
>             Project: Oozie
>          Issue Type: Bug
>    Affects Versions: 3.2.0
>            Reporter: Mona Chitnis
>            Assignee: Mona Chitnis
>              Labels: oozie
>             Fix For: 3.2.0
>
>   Original Estimate: 48h
>  Remaining Estimate: 48h
>
> Job cannot be started with option 'start' after 'submit'. Option 'run' works ok.
> Job cannot be killed in either case.
> $ oozie job -submit -config job.properties
> <job-id>
> $ oozie job -start <job-id>
> Error: E0508 : E0508: User [?] not authorized for WF job
> [<job-id>]
> $ oozie job -kill <job-id>
> Error: E0508 : E0508: User [?] not authorized for WF job
> [<job-id>]
> Same behavior for coordinator and bundle jobs - Error E0509
> A part of the stacktrace
>  at org.apache.oozie.service.AuthorizationService.isUserInAcl(AuthorizationService.java:371)
>        at org.apache.oozie.service.AuthorizationService.authorizeForJob(AuthorizationService.java:405)
>        at org.apache.oozie.servlet.BaseJobServlet.doPut(BaseJobServlet.java:74)
>        at javax.servlet.http.HttpServlet.service(HttpServlet.java:640)
>        at org.apache.oozie.servlet.JsonRestServlet.service(JsonRestServlet.java:285)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)