[
https://issues.apache.org/jira/browse/OOZIE-2111?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Kanter updated OOZIE-2111:
---------------------------------
Attachment: OOZIE-2111.patch
Simple patch that updates server.xml and ssl-server.xml to use the larger
{{maxHttpHeaderSize}}.
> Kerberized Oozie doesn't allow connections from users with a lot of groups
> --------------------------------------------------------------------------
>
> Key: OOZIE-2111
> URL: https://issues.apache.org/jira/browse/OOZIE-2111
> Project: Oozie
> Issue Type: Improvement
> Components: security
> Reporter: Robert Kanter
> Assignee: Robert Kanter
> Attachments: OOZIE-2111.patch
>
>
> If you try to use the Oozie CLI in a Kerberized environment with a user in a
> lot of groups (e.g. the groups list is 30+ lines), all commands fails with
> {noformat}
> Error: AUTHENTICATION : Could not authenticate, Authentication failed,
> status: 400
> {noformat}
> We need to increase the {{maxHttpHeaderSize}} that Tomcat allows from the
> default, 8192 (8K), to 65536 (64K).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
