oozie does not recognize admin user
------------------------------------
Key: OOZIE-730
URL: https://issues.apache.org/jira/browse/OOZIE-730
Project: Oozie
Issue Type: Bug
Reporter: Mohammad Kamrul Islam
therefore $ cat /home/y/conf/yoozie/adminusers.txt
wrkflow
oozie
mchiang
kamrul
hadoopqa
but admin command failed.
$ oozie admin -systemmode NORMAL
Error: E0503 : E0503: User [?] does not have admin privileges
2012-01-24 00:03:43,778 WARN V1AdminServlet:542 - USER[?] GROUP[-] TOKEN[-]
APP[-] JOB[-] ACTION[-] URL[PUT
http://<HOST>:4080/oozie/v1/admin/status?systemmode=NORMAL]
error[E0503], E0503: User [?] does not have admin privileges
org.apache.oozie.servlet.XServletException: E0503: User [?] does not have admin
privileges
at
org.apache.oozie.servlet.BaseAdminServlet.doPut(BaseAdminServlet.java:62)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:640)
at
org.apache.oozie.servlet.JsonRestServlet.service(JsonRestServlet.java:284)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.yahoo.oozie.security.authentication.filter.AuthFilter$2.doFilter(AuthFilter.java:132)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:372)
at
com.yahoo.oozie.security.authentication.filter.AuthFilter.doFilter(AuthFilter.java:144)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at yjava.cookie.CookieDataFilter.doFilter(CookieDataFilter.java:371)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at yjava.remote.ip.RemoteIPFilter.doFilter(RemoteIPFilter.java:154)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
yjava.security.yiv.servlet.InputValidationFilter.doFilter(InputValidationFilter.java:193)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
yjava.tomcat.valves.YahooConnectionValve.invoke(YahooConnectionValve.java:165)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:662)
Caused by: org.apache.oozie.service.AuthorizationException: E0503: User [?]
does not have admin privileges
at
org.apache.oozie.service.AuthorizationService.authorizeForAdmin(AuthorizationService.java:217)
at
org.apache.oozie.servlet.BaseAdminServlet.doPut(BaseAdminServlet.java:59)
... 30 more
it's ok in 3.1.3. for example,
[oozie ~]$ /home/y/var/yoozieclient/bin/oozie admin -version -oozie
http://gsbl90116.blue.ygrid.yahoo.com:4080/oozie -auth kerberos
Oozie server build version: 3.1.3
[oozie@gsbl90116 ~]$ /home/y/var/yoozieclient/bin/oozie admin -systemmode
NORMAL -oozie http://gsbl90116.blue.ygrid.yahoo.com:4080/oozie -auth kerberos
System mode: NORMAL
2012-01-24 00:10:37,237 INFO KerberosAuthenticationProvider:68 - Successfully
validated oozie/[email protected]
2012-01-24 00:10:37,242 INFO AuthenticationHelper:30 - Proxying as oozie
2012-01-24 00:10:37,292 INFO KerberosAuthenticationProvider:68 - Successfully
validated oozie/[email protected]
2012-01-24 00:10:37,297 INFO AuthenticationHelper:30 - Proxying as oozie
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
