Author: rkanter
Date: Mon Jan 28 23:23:26 2013
New Revision: 1439688
URL: http://svn.apache.org/viewvc?rev=1439688&view=rev
Log:
OOZIE-1172 Add documentation on how to get Java actions to authenticate
properly on Kerberos-enabled clusters (rkanter)
Modified:
oozie/trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki
oozie/trunk/release-log.txt
Modified: oozie/trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki
URL:
http://svn.apache.org/viewvc/oozie/trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki?rev=1439688&r1=1439687&r2=1439688&view=diff
==============================================================================
--- oozie/trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki (original)
+++ oozie/trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki Mon Jan 28
23:23:26 2013
@@ -1319,6 +1319,15 @@ The =capture-output= element can be used
EL-functions. This needs to be written out as a java properties format file.
The filename is obtained via a System
property specified by the constant
=JavaMainMapper.OOZIE_JAVA_MAIN_CAPTURE_OUTPUT_FILE=
+*IMPORTANT:* In order for a Java action to succeed on a secure cluster, it
must propagate the Hadoop delegation token like in the
+following code snippet (this is benign on non-secure clusters):
+<verbatim>
+// propagate delegation related props from launcher job to MR job
+if (System.getenv("HADOOP_TOKEN_FILE_LOCATION") != null) {
+ jobConf.set("mapreduce.job.credentials.binary",
System.getenv("HADOOP_TOKEN_FILE_LOCATION"));
+}
+</verbatim>
+
*IMPORTANT:* Because the Java application is run from within a Map-Reduce job,
from Hadoop 0.20. onwards a queue must
be assigned to it. The queue name must be specified as a configuration
property.
Modified: oozie/trunk/release-log.txt
URL:
http://svn.apache.org/viewvc/oozie/trunk/release-log.txt?rev=1439688&r1=1439687&r2=1439688&view=diff
==============================================================================
--- oozie/trunk/release-log.txt (original)
+++ oozie/trunk/release-log.txt Mon Jan 28 23:23:26 2013
@@ -1,5 +1,6 @@
-- Oozie 3.4.0 release (trunk - unreleased)
+OOZIE-1172 Add documentation on how to get Java actions to authenticate
properly on Kerberos-enabled clusters (rkanter)
OOZIE-87 GH-47: Feature to supply a comma separated list of jars in an
'archive tag' of workflow (jaoki via rkanter)
OOZIE-1188 Typo in documentation for using login server example (rkanter)
OOZIE-1160 Oozie web-console to display all job URLs spawned by Pig (mona)
