You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@falcon.apache.org by "Peeyush Bishnoi (JIRA)" <ji...@apache.org> on 2016/05/18 15:27:12 UTC

[jira] [Commented] (FALCON-1970) FALCON failed to schedule a feed in Oozie

    [ https://issues.apache.org/jira/browse/FALCON-1970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15289146#comment-15289146 ] 

Peeyush Bishnoi commented on FALCON-1970:
-----------------------------------------

[~mayki] From the exception it looks like that IP XXXXXXXXXXX is not authorized hosts to submit jobs to Oozie. To resolve this issue, in file core-site.xml and for the key "hadoop.proxyuser.oozie.hosts", can you specify from which host you want to connect to Oozie server. Also you can set value "*" for "hadoop.proxyuser.oozie.hosts" . Once you set, restart the HDFS and Oozie.

I hope this will help you.

> FALCON failed to schedule a feed in Oozie
> -----------------------------------------
>
>                 Key: FALCON-1970
>                 URL: https://issues.apache.org/jira/browse/FALCON-1970
>             Project: Falcon
>          Issue Type: Bug
>          Components: falcon-ui, feed, oozie
>    Affects Versions: 0.6.1
>            Reporter: mayki
>              Labels: security
>
> 2016-05-18 09:16:10,147  INFO SLACalculatorMemory:520 - SERVER[clusterA] USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] Running periodic SLA check
> 2016-05-18 09:16:13,168  INFO BaseJobServlet:520 - SERVER[clusterA] USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] AuthorizationException
> org.apache.oozie.service.AuthorizationException: E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/clusterA@EXAMPLE.COM from IP XXXXXXXXXXX
>         at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:406)
>         at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:263)
>         at org.apache.oozie.servlet.BaseJobsServlet.doPost(BaseJobsServlet.java:99)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
>         at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
>         at java.lang.Thread.run(Thread.java:745)
> Caused by: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): Unauthorized connection for super-user: oozie/clusterA@EXAMPLE.COM from IP XXXXXXXXXXX
>         at org.apache.hadoop.ipc.Client.call(Client.java:1427)
>         at org.apache.hadoop.hdfs.DistributedFileSystem.getFileStatus(DistributedFileSystem.java:1311)
>         at org.apache.hadoop.fs.FileSystem.exists(FileSystem.java:1424)
>         at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:378)
>         ... 26 more
> 2016-05-18 09:16:13,169  WARN V1JobsServlet:523 - SERVER[clusterA] USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] URL[POST http://clusterA:11000/oozie/v2/jobs?action=dryrun&doAs=falcon&user.name=falcon/clusterA@EXAMPLE.COM] error[E0501], E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/clusterA@EXAMPLE.COM from IP XXXXXXXXXXX
> org.apache.oozie.servlet.XServletException: E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/clusterA@EXAMPLE.COM from IP XXXXXXXXXXX
>         at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:271)
>         at org.apache.oozie.servlet.BaseJobsServlet.doPost(BaseJobsServlet.java:99)
>         at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:606)
>         at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
>         at java.lang.Thread.run(Thread.java:745)
> Caused by: org.apache.oozie.service.AuthorizationException: E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/clusterA@EXAMPLE.COM from IP XXXXXXXXXXX
>         at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:406)
>         at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:263)
>         ... 25 more
> Caused by: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): Unauthorized connection for super-user: oozie/clusterA@EXAMPLE.COM from IP XXXXXXXXXXX
>         at org.apache.hadoop.ipc.Client.call(Client.java:1427)
>         at org.apache.hadoop.ipc.Client.call(Client.java:1358)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)