You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@falcon.apache.org by Aaron Gresch <ag...@gmail.com> on 2015/01/16 23:10:18 UTC

Falcon authentication failure - No rules applied

I finally have Falcon replicating data on our secure clusters when using
the kerberos.principal I have setup.  I have kerberos authentication
enabled.

Now when I try and list cluster entities (./bin/falcon entity -type cluster
-list) when kinit'd as a different user, I get the error below.

Is this expected?  Or would I have a setup issue of some kind?  I am unsure
what this exception means.


Stacktrace:
org.apache.falcon.client.FalconCLIException: Unable to initialize Falcon
Client object
        at
org.apache.falcon.client.FalconClient.<init>(FalconClient.java:145)
        at org.apache.falcon.cli.FalconCLI.run(FalconCLI.java:177)
        at org.apache.falcon.cli.FalconCLI.main(FalconCLI.java:132)
Caused by: org.apache.falcon.client.FalconCLIException: Could not
authenticate for url
https://gsbl90213.blue.ygrid.yahoo.com:15443/api/options?user.name=agresch,
Authentication failed, status: 500, message: No rules applied to
agresch@Y.CORP.YAHOO.COM
        at
org.apache.falcon.client.FalconClient.getToken(FalconClient.java:173)
        at
org.apache.falcon.client.FalconClient.<init>(FalconClient.java:143)
        ... 2 more
Caused by:
org.apache.hadoop.security.authentication.client.AuthenticationException:
Authentication failed, status: 500, message: No rules applied to
agresch@Y.CORP.YAHOO.COM
        at
org.apache.hadoop.security.authentication.client.AuthenticatedURL.extractToken(AuthenticatedURL.java:288)
        at
org.apache.hadoop.security.authentication.client.PseudoAuthenticator.authenticate(PseudoAuthenticator.java:77)
        at
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:205)
        at
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
        at
org.apache.falcon.client.FalconClient.getToken(FalconClient.java:171)
        ... 3 more

Re: Falcon authentication failure - No rules applied

Posted by Seetharam Venkatesh <ve...@innerzeal.com>.
Pls set authToLocal appropriately. Use the same rules from core-site.xml
and use \ to separate the lines in falcon.

On Fri, Jan 16, 2015 at 2:10 PM, Aaron Gresch <ag...@gmail.com> wrote:

> I finally have Falcon replicating data on our secure clusters when using
> the kerberos.principal I have setup.  I have kerberos authentication
> enabled.
>
> Now when I try and list cluster entities (./bin/falcon entity -type cluster
> -list) when kinit'd as a different user, I get the error below.
>
> Is this expected?  Or would I have a setup issue of some kind?  I am unsure
> what this exception means.
>
>
> Stacktrace:
> org.apache.falcon.client.FalconCLIException: Unable to initialize Falcon
> Client object
>         at
> org.apache.falcon.client.FalconClient.<init>(FalconClient.java:145)
>         at org.apache.falcon.cli.FalconCLI.run(FalconCLI.java:177)
>         at org.apache.falcon.cli.FalconCLI.main(FalconCLI.java:132)
> Caused by: org.apache.falcon.client.FalconCLIException: Could not
> authenticate for url
> https://gsbl90213.blue.ygrid.yahoo.com:15443/api/options?user.name=agresch
> ,
> Authentication failed, status: 500, message: No rules applied to
> agresch@Y.CORP.YAHOO.COM
>         at
> org.apache.falcon.client.FalconClient.getToken(FalconClient.java:173)
>         at
> org.apache.falcon.client.FalconClient.<init>(FalconClient.java:143)
>         ... 2 more
> Caused by:
> org.apache.hadoop.security.authentication.client.AuthenticationException:
> Authentication failed, status: 500, message: No rules applied to
> agresch@Y.CORP.YAHOO.COM
>         at
>
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.extractToken(AuthenticatedURL.java:288)
>         at
>
> org.apache.hadoop.security.authentication.client.PseudoAuthenticator.authenticate(PseudoAuthenticator.java:77)
>         at
>
> org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:205)
>         at
>
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
>         at
> org.apache.falcon.client.FalconClient.getToken(FalconClient.java:171)
>         ... 3 more
>



-- 
Regards,
Venkatesh

“Perfection (in design) is achieved not when there is nothing more to add,
but rather when there is nothing more to take away.”
- Antoine de Saint-Exupéry