[
https://issues.apache.org/jira/browse/FALCON-559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Balu Vellanki resolved FALCON-559.
----------------------------------
Resolution: Not A Problem
Resolving an old Jira since it has been now confirmed that Falcon works on
secure cluster using secure oozie.
> Unable to start oozie server due to Kerberos authentication error
> -----------------------------------------------------------------
>
> Key: FALCON-559
> URL: https://issues.apache.org/jira/browse/FALCON-559
> Project: Falcon
> Issue Type: Bug
> Components: oozie
> Affects Versions: 0.6
> Reporter: Peng
>
> Hi, falcon dev
> Our group is trying to deploy falcon on cluster. And our oozie is using
> Kerberos as authentication mech. Now I encounter such error when submit
> clusters which I think is related to the oozie authentication. Is there
> anything we can do to solve this issue? I am pretty sure the oozie server is
> up, because I can open oozie server's UI through my browser. Could you please
> have a look at this?
> Thanks,
> Peng
> -----------------------------------Log----------------------------------------------
> -07-30 15:36:06,577 ERROR -
> [31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster
> 69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Unable to persist entity object
> (AbstractEntityManager:157)
> org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server
> or port: https://10.24.156.43:4443/oozie/
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
> at
> org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
> at
> org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
> at
> org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
> at
> org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:601)
> at
> org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
> at
> org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
> at
> org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:601)
> at
> com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
> at
> com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
> at
> com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
> at
> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
> com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
> at
> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
> com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
> at
> com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
> at
> com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
> at
> com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
> at
> org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
> at
> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
> at
> org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
> at
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
> at
> org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
> at
> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
> at
> org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
> at
> org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
> at
> org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
> at
> org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
> at
> org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
> at
> org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
> at org.mortbay.jetty.Server.handle(Server.java:326)
> at
> org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
> at
> org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
> at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
> at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
> at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
> at
> org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
> at
> org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
> at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
> Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
> at
> org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:123)
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
> ... 59 more
> Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at
> org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
> at
> org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
> ... 60 more
> Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at
> org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
> at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
> at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
> at
> org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
> at
> org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
> at
> org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
> at
> org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
> at
> org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
> at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
> at
> org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
> ... 61 more
> Caused by: javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
> at
> sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
> at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
> at
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
> at
> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
> at
> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
> at
> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
> at
> org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
> at
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
> at
> org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
> at
> org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
> at
> org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
> at
> org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAs(Subject.java:415)
> at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
> at
> org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
> at
> org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
>
>
> at
> org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
> ... 70 more
> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
> at
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
> at
> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
> at sun.security.validator.Validator.validate(Validator.java:260)
> at
> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
> at
> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
> at
> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
> ... 92 more
> Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target
> at
> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
> at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
> at
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
> ... 98 more
> 2014-07-30 15:36:06,581 ERROR -
> [31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster
> 69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Failure reason (FalconWebException:41)
> org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server
> or port: https://10.24.156.43:4443/oozie/ at
> org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
> at
> org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
> at
> org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
> at
> org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
> at
> org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:601)
> at
> org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
> at
> org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
> at
> org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
> at
> org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:601)
> at
> com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
> at
> com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$TypeOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:185)
> at
> com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
> at
> com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
> at
> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
> com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
> at
> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
> com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
> at
> com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
> at
> com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
> at
> com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
> at
> com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
> at
> org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
> at
> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
> at
> org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
> at
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
> at
> org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
> at
> org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
> at
> org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
> at
> org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
> at
> org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
> at
> org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
> at
> org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
> at
> org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
> at org.mortbay.jetty.Server.handle(Server.java:326)
> at
> org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
> at
> org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
> at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
> at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
> at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
> at
> org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
> at
> org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
> at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
> Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
>
> at
> org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
> ... 59 more
> Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at
> org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
> at
> org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
> ... 60 more
> Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at
> org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
> at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
> at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
> at
> org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
> at
> org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
> at
> org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
> at
> org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
> at
> org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
> at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
> at
> org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
> ... 61 more
> Caused by: javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
> at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
> at
> sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
> at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
> at
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
> at
> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
> at
> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
> at
> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
> at
> org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
> at
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
> at
> org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
> at
> org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
> at
> org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
> at
> org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
> at
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
> at
> org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
> at
> org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
> at
> org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
> at
> org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAs(Subject.java:415)
> at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
> at
> org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
> at
> org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
> at
> org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
> ... 70 more
> Caused by: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
> at
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
> at
> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
> at sun.security.validator.Validator.validate(Validator.java:260)
> at
> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
> at
> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
> at
> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
> at
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
> ... 92 more
> Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target
> at
> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
> at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
> at
> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
> ... 98 more
> 2014-07-30 15:36:06,584 ERROR -
> [31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster
> 69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Action failed: Bad Request
> Error: Invalid Workflow server or port: https://10.24.156.43:4443/oozie/
> Unable to reach Oozie server. (FalconWebException:67)
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
