Hmm, not quite:
oozie-site.xml has now:
<property>
<name>oozie.service.ProxyUserService.proxyuser.oozie.hosts</name>
<value>*</value>
<description>
...
</description>
</property>
<property>
<name>oozie.service.ProxyUserService.proxyuser.oozie.groups</name>
<value>oozie,ubuntu</value>
<description>
...
</description>
</property>
but I still get:
2013-09-10 10:42:06,551 WARN PigActionExecutor:542 - USER[ubuntu] GROUP[-]
TOKEN[] APP[oozie-pig] JOB[0000000-130910103959405-oozie-oozi-W]
ACTION[0000000-130910103959405-oozie-oozi-W@pig1] credentials is null for
the action
2013-09-10 10:42:07,312 WARN ActionStartXCommand:542 - USER[ubuntu]
GROUP[-] TOKEN[] APP[oozie-pig] JOB[0000000-130910103959405-oozie-oozi-W]
ACTION[0000000-130910103959405-oozie-oozi-W@pig1] Error starting action
[pig1]. ErrorType [TRANSIENT], ErrorCode [JA009], Message [JA009: User:
oozie is not allowed to impersonate ubuntu]
org.apache.oozie.action.ActionExecutorException: JA009: User: oozie is not
allowed to impersonate ubuntu
at
org.apache.oozie.action.ActionExecutor.convertExceptionHelper(ActionExecutor.java:418)
at
org.apache.oozie.action.ActionExecutor.convertException(ActionExecutor.java:392)
at
org.apache.oozie.action.hadoop.JavaActionExecutor.submitLauncher(JavaActionExecutor.java:773)
at
org.apache.oozie.action.hadoop.JavaActionExecutor.start(JavaActionExecutor.java:927)
at
org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:211)
at
org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:59)
at org.apache.oozie.command.XCommand.call(XCommand.java:277)
at
org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:326)
at
org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:255)
at
org.apache.oozie.service.CallableQueueService$CallableWrapper.run(CallableQueueService.java:175)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
at java.lang.Thread.run(Thread.java:679)
Caused by:
org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException):
User: oozie is not allowed to impersonate ubuntu
at org.apache.hadoop.ipc.Client.call(Client.java:1237)
at
org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:202)
at $Proxy30.getDelegationToken(Unknown Source)
at
org.apache.hadoop.yarn.api.impl.pb.client.ClientRMProtocolPBClientImpl.getDelegationToken(ClientRMProtocolPBClientImpl.java:230)
at
org.apache.hadoop.yarn.client.YarnClientImpl.getRMDelegationToken(YarnClientImpl.java:182)
at
org.apache.hadoop.mapred.ResourceMgrDelegate.getDelegationToken(ResourceMgrDelegate.java:99)
at
org.apache.hadoop.mapred.YARNRunner.getDelegationToken(YARNRunner.java:204)
at org.apache.hadoop.mapreduce.Cluster.getDelegationToken(Cluster.java:390)
at org.apache.hadoop.mapred.JobClient$16.run(JobClient.java:1249)
at org.apache.hadoop.mapred.JobClient$16.run(JobClient.java:1246)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:416)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1408)
at
org.apache.hadoop.mapred.JobClient.getDelegationToken(JobClient.java:1245)
at
org.apache.oozie.service.HadoopAccessorService.createJobClient(HadoopAccessorService.java:372)
at
org.apache.oozie.action.hadoop.JavaActionExecutor.createJobClient(JavaActionExecutor.java:970)
at
org.apache.oozie.action.hadoop.JavaActionExecutor.submitLauncher(JavaActionExecutor.java:723)
... 10 more
2013-09-10 10:42:07,353 INFO ActionStartXCommand:539 - USER[ubuntu]
GROUP[-] TOKEN[] APP[oozie-pig] JOB[0000000-130910103959405-oozie-oozi-W]
ACTION[0000000-130910103959405-oozie-oozi-W@pig1] Next Retry, Attempt
Number [1] in [60,000] milliseconds
...any more hints?
On Tue, Sep 10, 2013 at 10:25 AM, Mehant Baid <[email protected]> wrote:
> Just briefly looking at the error and the configuration seems to me that
> you might have the configuration mixed up.
>
> The property
>
>
> <name>oozie.service.**ProxyUserService.proxyuser.**ubuntu.hosts</name>
> <value>*</value>
>
> should probably be
>
> <name>oozie.service.**ProxyUserService.proxyuser.**oozie.hosts</name>
> <value>*</value>
>
> This would mean that user oozie is allowed to impersonate anybody (similar
> change for groups).
>
> Thanks
> Mehant
>
>
>
> On 9/9/13 1:29 AM, Daniel Koller wrote:
>
>> Hi there,
>>
>> I am running a CDH4 Hadoop Installation (Yarn) on a Ubuntu 12.04 LTS in
>> pseudo-distributed mode.
>>
>> I want to start an oozie process from a pig script in the local ubuntu
>> users directory by
>> *oozie pig -file users.pig -config oozie.properties *
>>
>> The error message is:
>> *130907121351030-oozie-oozi-W@**pig1] Error starting action [pig1].
>> ErrorType
>>
>> [TRANSIENT], ErrorCode [JA009], Message [JA009: User: oozie is not allowed
>> to impersonate ubuntu]*
>> *org.apache.oozie.action.**ActionExecutorException: JA009: User: oozie
>> is not
>> allowed to impersonate ubuntu*
>> * at
>> org.apache.oozie.action.**ActionExecutor.**convertExceptionHelper(**
>> ActionExecutor.java:418)....
>> *
>> * at java.lang.Thread.run(Thread.**java:679)*
>> *Caused by:
>> org.apache.hadoop.ipc.**RemoteException(org.apache.**
>> hadoop.security.authorize.**AuthorizationException):
>> User: oozie is not allowed to impersonate ubuntu*
>> * at org.apache.hadoop.ipc.Client.**call(Client.java:1237)*
>>
>> ..
>>
>> The relevant config files are:
>> *oozie.properties:*
>> *jobTracker=127.0.1.1:8032*
>> *mapred.job.tracker=127.0.1.1:**8032*
>> *nameNode=hdfs://localhost:**8020*
>> *namenode=hdfs://localhost:**8020*
>> *fs.default.name=hdfs://**localhost:8020*
>> *oozie.libpath=hdfs://**localhost:8020/user/ubuntu/**pig/lib/*
>>
>> The relevant settings in *oozie-site.xml:*
>>
>> ...
>> <property>
>> <name>oozie.service.**ProxyUserService.proxyuser.**
>> ubuntu.hosts</name>
>> <value>*</value>
>> <description>
>> ...
>> </description>
>> </property>
>>
>> <property>
>> <name>oozie.service.**ProxyUserService.proxyuser.**
>> ubuntu.groups</name>
>> <value>oozie,ubuntu</value>
>> <description>
>> ... </description>
>> </property>
>> .."
>>
>> And the settings in hadoops* core-site.xml:*
>>
>> <?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
>>
>> <configuration>
>> <property>
>> <name>fs.default.name</name>
>> <value>hdfs://localhost:8020</**value>
>> </property>
>>
>> <!-- OOZIE proxy user setting -->
>> <property>
>> <name>hadoop.proxyuser.oozie.**hosts</name>
>> <value>*</value>
>> </property>
>> <property>
>> <name>hadoop.proxyuser.oozie.**groups</name>
>> <value>*</value>
>> </property>
>>
>> <!-- HTTPFS proxy user setting -->
>> <property>
>> <name>hadoop.proxyuser.httpfs.**hosts</name>
>> <value>*</value>
>> </property>
>> <property>
>> <name>hadoop.proxyuser.httpfs.**groups</name>
>> <value>*</value>
>> </property>
>>
>> </configuration>
>>
>> Any hints on what I do wrong?
>>
>> Kind regards,
>>
>> Daniel
>>
>>
>>
>
--
Gruss / Kind regards,
*Daniel Koller *
Jahnstrasse 20 * 80469 München
+49.163.6191979 (mobile) * http://blog.dakoller.net
