User: oozie is not allowed to impersonate …

[Dave Cardwell <da...@davecardwell.co.uk>]

When I submit an oozie job from the command line I receive the following
error:

org.apache.oozie.servlet.XServletException: E0501: Could not perform
> authorization operation, User: oozie is not allowed to impersonate lpadm

at
> org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:203)

…


I have set oozie.service.ProxyUserService.proxyuser.oozie.(hosts|groups) to
*, as I can see in the server startup logs:

2013-12-06 12:51:59,463  INFO ProxyUserService:539 - USER[-] GROUP[-]
> Loading proxyuser settings
> [oozie.service.ProxyUserService.proxyuser.oozie.hosts]=[*]
> 2013-12-06 12:51:59,464  INFO ProxyUserService:539 - USER[-] GROUP[-]
> Loading proxyuser settings
> [oozie.service.ProxyUserService.proxyuser.oozie.groups]=[*]


The Unix users “oozie” and “lpadm” are available on all nodes.

I’m using Oozie v4.0.0.2.0.5.0-67, on Hadoop v2.1.0.2.0.5.0-67.

Any ideas? I’ve been Googling and no suggestions have worked.

-- 
Best wishes,
Dave Cardwell.

http://davecardwell.co.uk/