Robert Kanter created OOZIE-2111:
------------------------------------
Summary: Kerberized Oozie doesn't allow connections from users
with a lot of groups
Key: OOZIE-2111
URL: https://issues.apache.org/jira/browse/OOZIE-2111
Project: Oozie
Issue Type: Improvement
Components: security
Reporter: Robert Kanter
Assignee: Robert Kanter
If you try to use the Oozie CLI in a Kerberized environment with a user in a
lot of groups (e.g. the groups list is 30+ lines), all commands fails with
{noformat}
Error: AUTHENTICATION : Could not authenticate, Authentication failed, status:
400
{noformat}
We need to increase the {{maxHttpHeaderSize}} that Tomcat allows from the
default, 8192 (8K), to 65536 (64K).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
