Author: rkanter
Date: Mon Feb 4 18:03:57 2013
New Revision: 1442277
URL: http://svn.apache.org/viewvc?rev=1442277&view=rev
Log:
OOZIE-1172 Add documentation on how to get Java actions to authenticate
properly on Kerberos-enabled clusters (rkanter)
Modified:
oozie/branches/branch-3.3/docs/src/site/twiki/WorkflowFunctionalSpec.twiki
oozie/branches/branch-3.3/release-log.txt
Modified:
oozie/branches/branch-3.3/docs/src/site/twiki/WorkflowFunctionalSpec.twiki
URL:
http://svn.apache.org/viewvc/oozie/branches/branch-3.3/docs/src/site/twiki/WorkflowFunctionalSpec.twiki?rev=1442277&r1=1442276&r2=1442277&view=diff
==============================================================================
--- oozie/branches/branch-3.3/docs/src/site/twiki/WorkflowFunctionalSpec.twiki
(original)
+++ oozie/branches/branch-3.3/docs/src/site/twiki/WorkflowFunctionalSpec.twiki
Mon Feb 4 18:03:57 2013
@@ -1319,6 +1319,15 @@ The =capture-output= element can be used
EL-functions. This needs to be written out as a java properties format file.
The filename is obtained via a System
property specified by the constant
=JavaMainMapper.OOZIE_JAVA_MAIN_CAPTURE_OUTPUT_FILE=
+*IMPORTANT:* In order for a Java action to succeed on a secure cluster, it
must propagate the Hadoop delegation token like in the
+following code snippet (this is benign on non-secure clusters):
+<verbatim>
+// propagate delegation related props from launcher job to MR job
+if (System.getenv("HADOOP_TOKEN_FILE_LOCATION") != null) {
+ jobConf.set("mapreduce.job.credentials.binary",
System.getenv("HADOOP_TOKEN_FILE_LOCATION"));
+}
+</verbatim>
+
*IMPORTANT:* Because the Java application is run from within a Map-Reduce job,
from Hadoop 0.20. onwards a queue must
be assigned to it. The queue name must be specified as a configuration
property.
Modified: oozie/branches/branch-3.3/release-log.txt
URL:
http://svn.apache.org/viewvc/oozie/branches/branch-3.3/release-log.txt?rev=1442277&r1=1442276&r2=1442277&view=diff
==============================================================================
--- oozie/branches/branch-3.3/release-log.txt (original)
+++ oozie/branches/branch-3.3/release-log.txt Mon Feb 4 18:03:57 2013
@@ -1,5 +1,6 @@
-- Oozie 3.3.2 (unreleased)
+OOZIE-1172 Add documentation on how to get Java actions to authenticate
properly on Kerberos-enabled clusters (rkanter)
OOZIE-87 GH-47: Feature to supply a comma separated list of jars in an
'archive tag' of workflow (jaoki via rkanter)
OOZIE-1160 Oozie web-console to display all job URLs spawned by Pig (mona)
OOZIE-1177 HostnameFilter should only catch UnknownHostException, not
Exception (rkanter)
