You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@oozie.apache.org by "Hadoop QA (JIRA)" <ji...@apache.org> on 2015/04/07 02:06:12 UTC
[jira] [Commented] (OOZIE-1726) Oozie does not support _HOST when
configuring kerberos security
[ https://issues.apache.org/jira/browse/OOZIE-1726?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14482251#comment-14482251 ]
Hadoop QA commented on OOZIE-1726:
----------------------------------
Testing JIRA OOZIE-1726
Cleaning local git workspace
----------------------------
{color:green}+1 PATCH_APPLIES{color}
{color:green}+1 CLEAN{color}
{color:red}-1 RAW_PATCH_ANALYSIS{color}
. {color:green}+1{color} the patch does not introduce any @author tags
. {color:green}+1{color} the patch does not introduce any tabs
. {color:green}+1{color} the patch does not introduce any trailing spaces
. {color:green}+1{color} the patch does not introduce any line longer than 132
. {color:red}-1{color} the patch does not add/modify any testcase
{color:green}+1 RAT{color}
. {color:green}+1{color} the patch does not seem to introduce new RAT warnings
{color:green}+1 JAVADOC{color}
. {color:green}+1{color} the patch does not seem to introduce new Javadoc warnings
{color:green}+1 COMPILE{color}
. {color:green}+1{color} HEAD compiles
. {color:green}+1{color} patch compiles
. {color:green}+1{color} the patch does not seem to introduce new javac warnings
{color:green}+1 BACKWARDS_COMPATIBILITY{color}
. {color:green}+1{color} the patch does not change any JPA Entity/Colum/Basic/Lob/Transient annotations
. {color:green}+1{color} the patch does not modify JPA files
{color:red}-1 TESTS{color}
. Tests run: 1637
. Tests failed: 2
. Tests errors: 1
. The patch failed the following testcases:
. testCoordStatusTransitServiceDoneWithError(org.apache.oozie.service.TestStatusTransitService)
. testCoordRerunDateNeg(org.apache.oozie.command.coord.TestCoordRerunXCommand)
{color:green}+1 DISTRO{color}
. {color:green}+1{color} distro tarball builds with the patch
----------------------------
{color:red}*-1 Overall result, please check the reported -1(s)*{color}
The full output of the test-patch run is available at
. https://builds.apache.org/job/oozie-trunk-precommit-build/2293/
> Oozie does not support _HOST when configuring kerberos security
> ---------------------------------------------------------------
>
> Key: OOZIE-1726
> URL: https://issues.apache.org/jira/browse/OOZIE-1726
> Project: Oozie
> Issue Type: Improvement
> Components: core
> Affects Versions: 4.0.0
> Reporter: Mingjiang Shi
> Assignee: Bowen Zhang
> Fix For: trunk
>
> Attachments: oozie-1726.patch, oozie-1726.patch
>
>
> When configuring kerberos security for Oozie, the oozie.service.HadoopAccessorService.kerberos.principal property and oozie.authentication.kerberos.principal need to be configured. However, both of which don't support _HOST substitution, i.e. if it is configured as oozie/_HOST@EXAMPLE.COM, the _HOST shall be replaced with the FQDN of the host. This feature is supported by hdfs and yarn, so it would be great if oozie support it as well.
> Below is from the oozie log:
> ======================
> 2014-02-17 08:28:53,199 FATAL Services:533 - USER[-] GROUP[-] E0100: Could not initialize service [org.apache.oozie.service.HadoopAccessorService], Login failure for oozie/_HOST@EXAMPLE.COM from keytab /etc/security/keytab/oozie.service.keytab
> org.apache.oozie.service.ServiceException: E0100: Could not initialize service [org.apache.oozie.service.HadoopAccessorService], Login failure for oozie/_HOST@EXAMPLE.COM from keytab /etc/security/keytab/oozie.service.keytab
> ======================
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)