[
https://issues.apache.org/jira/browse/OOZIE-2165?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14353210#comment-14353210
]
Romain Rigaux commented on OOZIE-2165:
--------------------------------------
Solution #2 is probably the best.
> Job log fetching can fail in Oozie HA mode when using doAs impersonation
> ------------------------------------------------------------------------
>
> Key: OOZIE-2165
> URL: https://issues.apache.org/jira/browse/OOZIE-2165
> Project: Oozie
> Issue Type: Bug
> Components: HA
> Affects Versions: 4.1.0
> Reporter: Romain Rigaux
>
> From https://issues.cloudera.org/browse/HUE-2608
> "Oozie logs in Hue does not work well when Oozie is configured in HA mode.
> Essentially, DoAs user doesn't work for HA request. This happens because in
> HA one server will call other server as "tomcat user".
> http://oozie-server:4080/oozie/v2/job/jobid1-oozie_CB-W?show=log&allservers=false&doAs=sumeet&user.name=hue
> will be
> http://oozie-server:4080/oozie/v2/job/jobid1-oozie_CB-W?show=log&allservers=false&doAs=sumeet&user.name=oozie
> Potential fixes can be to add oozie as proxy user or drop doAs user from
> server to server call. Since the request is already authenticated, it should
> ok to call other server with oozie user.
> http://oozie-server:4080/oozie/v2/job/jobid1-oozie_CB-W?show=log&allservers=false&user.name=oozie";
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
