Hi,
I tried this on Oozie 3.3 and I'm hitting this issue as well.
I'm using hadoop-1.0.4. This is my core-site.xml contents. biadmin is
superuser. I installed both hadoop and Oozie as biadmin
<!-- OOZIE -->
<property>
<name>hadoop.proxyuser.biadmin.hosts</name>
<value>*</value>
</property>
<property>
<name>hadoop.proxyuser.biadmin.groups</name>
<value>*</value>
</property>
<property>
<name>hadoop.proxyuser.oozie.hosts</name>
<value>*</value>
</property>
<property>
<name>hadoop.proxyuser.oozie.groups</name>
<value>*</value>
</property>
And this is the exception that I see from the hadoop logs
2012-11-08 10:29:57,332 INFO org.apache.hadoop.ipc.Server: IPC Server
listener on 9000: readAndProcess threw exception
org.apache.hadoop.security.AccessControlException: Connection from
127.0.0.1:34272 for protocol org.apache.hadoop.hdfs.protocol.ClientProtocol
is unauthorized for user biadmin via biadmin. Count of bytes read: 0
org.apache.hadoop.security.AccessControlException: Connection from
127.0.0.1:34272 for protocol org.apache.hadoop.hdfs.protocol.ClientProtocol
is unauthorized for user biadmin via biadmin
at org.apache.hadoop.ipc.Server$Connection.processOneRpc(Server.java:1287)
at org.apache.hadoop.ipc.Server$Connection.readAndProcess(Server.java:1182)
at org.apache.hadoop.ipc.Server$Listener.doRead(Server.java:537)
at org.apache.hadoop.ipc.Server$Listener$Reader.run(Server.java:344)
at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Thanks & Regards,
Harish.T.K
On Wed, Nov 7, 2012 at 6:04 PM, Saiph Kappa <[email protected]> wrote:
> saiph is a superuser yes. I built oozie with that user, and oozie is
> currently running with that user also. But I'm unable to run the examples,
> e.g.: /oozie-3.2.0-distro$ bin/oozie job -oozie
> http://localhost:11000/oozie-config
> examples/apps/java-main/job.properties -run
> Error: E0902 : E0902: Exception occured:
> [org.apache.hadoop.ipc.RemoteException: User: saiph is not allowed to
> impersonate saiph]
>
> Also tried to run the above command with sudo, obtaining the following
> error:
> Error: E0902 : E0902: Exception occured:
> [org.apache.hadoop.ipc.RemoteException: User: saiph is not allowed to
> impersonate root]
>
> Thanks/Regards.
>
> On Thu, Nov 8, 2012 at 1:44 AM, Harish Krishnan <
> [email protected]
> > wrote:
>
> > Is saiph a superuser?
> >
> > Thanks & Regards,
> > Harish.T.K
> >
> >
> > On Wed, Nov 7, 2012 at 5:41 PM, Saiph Kappa <[email protected]>
> wrote:
> >
> > > Correction:
> > >
> > > <property>
> > > <name>hadoop.proxyuser.saiph.hosts</name>
> > > <value>*</value>
> > > </property>
> > > <property>
> > > <name>hadoop.proxyuser.saiph.groups</name>
> > > <value>*</value>
> > > </property>
> > >
> > >
> > > On Thu, Nov 8, 2012 at 1:40 AM, Saiph Kappa <[email protected]>
> > wrote:
> > >
> > > > Sorry, I already did that in core-site.xml:
> > > >
> > > > <property>
> > > > <name>hadoop.proxyuser.sesteves.hosts</name>
> > > > <value>*</value>
> > > > </property>
> > > > <property>
> > > > <name>hadoop.proxyuser.sesteves.groups</name>
> > > > <value>*</value>
> > > > </property>
> > > >
> > > > But the error persists.
> > > >
> > > > On Thu, Nov 8, 2012 at 1:22 AM, Roman Shaposhnik <
> [email protected]
> > > >wrote:
> > > >
> > > >> On Wed, Nov 7, 2012 at 5:11 PM, Saiph Kappa <[email protected]>
> > > >> wrote:
> > > >> > Hi,
> > > >> >
> > > >> > I've downloaded the last stable oozie release (3.2.0). It brings
> > > >> > hadoop libs upto version 1.0.1, but that release is not available
> > from
> > > >> > the hadoop repositories (just the 1.0.4). So I tried running
> hadoop
> > > >> > 1.0.4 with oozie and, besides performing all the proxy
> > configurations
> > > >> > to the oozie user (in core-site.xml), I still got the following
> > error
> > > >> > while trying to run the examples:
> > > >> > «Error: E0902 :E0902: Exception
> > > >> > occured:[org.apache.hadoop.ipc.RemoteException: User: saiph is not
> > > >> > allowed to impersonate saiph]»
> > > >> >
> > > >> > Any idea of what could be wrong?
> > > >>
> > > >> Yes. You need to setup proxy users on the hadoop side:
> > > >>
> > > >> http://hadoop.apache.org/docs/stable/Secure_Impersonation.html
> > > >>
> > > >> Thanks,
> > > >> Roman.
> > > >>
> > > >
> > > >
> > >
> >
>
