[
https://issues.apache.org/jira/browse/AMBARI-9775?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-9775:
---------------------------------
Attachment: AMBARI-9775_01.patch
> Oozie failed to start in secured cluster for stacks 2.0 and 2.1
> ---------------------------------------------------------------
>
> Key: AMBARI-9775
> URL: https://issues.apache.org/jira/browse/AMBARI-9775
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Labels: kerberos
> Fix For: 2.0.0
>
> Attachments: AMBARI-9775_01.patch
>
>
> On 2.0 and 2.1 stack oozie server failed with following error:
> {noformat}
> 2015-02-23 16:23:54,474 WARN NativeCodeLoader:62 - SERVER[] Unable to load
> native-hadoop library for your platform... using builtin-java classes where
> applicable
> 2015-02-23 16:23:54,821 FATAL Services:533 - SERVER[] USER[-] GROUP[-] E0100:
> Could not initialize service
> [org.apache.oozie.service.HadoopAccessorService], Login failure for
> oozie/[email protected] from keytab /etc/security/keytabs/oozie.service.keytab
> org.apache.oozie.service.ServiceException: E0100: Could not initialize
> service [org.apache.oozie.service.HadoopAccessorService], Login failure for
> oozie/[email protected] from keytab /etc/security/keytabs/oozie.service.keytab
> at
> org.apache.oozie.service.HadoopAccessorService.kerberosInit(HadoopAccessorService.java:182)
> at
> org.apache.oozie.service.HadoopAccessorService.init(HadoopAccessorService.java:127)
> at
> org.apache.oozie.service.HadoopAccessorService.init(HadoopAccessorService.java:98)
> at
> org.apache.oozie.service.Services.setServiceInternal(Services.java:372)
> at org.apache.oozie.service.Services.setService(Services.java:358)
> at org.apache.oozie.service.Services.loadServices(Services.java:291)
> at org.apache.oozie.service.Services.init(Services.java:212)
> at
> org.apache.oozie.servlet.ServicesLoader.contextInitialized(ServicesLoader.java:39)
> at
> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4206)
> at
> org.apache.catalina.core.StandardContext.start(StandardContext.java:4705)
> at
> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:799)
> at
> org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:779)
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:601)
> at
> org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:675)
> at
> org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:601)
> at
> org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:502)
> at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1317)
> at
> org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:324)
> at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1065)
> at org.apache.catalina.core.StandardHost.start(StandardHost.java:840)
> at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1057)
> at
> org.apache.catalina.core.StandardEngine.start(StandardEngine.java:463)
> at
> org.apache.catalina.core.StandardService.start(StandardService.java:525)
> at
> org.apache.catalina.core.StandardServer.start(StandardServer.java:754)
> at org.apache.catalina.startup.Catalina.start(Catalina.java:595)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
> Caused by: java.io.IOException: Login failure for oozie/[email protected]
> from keytab /etc/security/keytabs/oozie.service.keytab
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:870)
> at
> org.apache.oozie.service.HadoopAccessorService.kerberosInit(HadoopAccessorService.java:174)
> ... 31 more
> Caused by: javax.security.auth.login.LoginException: Unable to obtain
> password from user
> at
> com.sun.security.auth.module.Krb5LoginModule.promptForPass(Krb5LoginModule.java:856)
> at
> com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:719)
> at
> com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:584)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at javax.security.auth.login.LoginContext.invoke(LoginContext.java:762)
> at
> javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
> at javax.security.auth.login.LoginContext$4.run(LoginContext.java:690)
> at javax.security.auth.login.LoginContext$4.run(LoginContext.java:688)
> at java.security.AccessController.doPrivileged(Native Method)
> at
> javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:687)
> at javax.security.auth.login.LoginContext.login(LoginContext.java:595)
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:861)
> ... 32 more
> 2015-02-23 16:23:54,833 INFO Services:539 - SERVER[] Shutdown
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)