AnsweredAssumed Answered

Oozie - User: mapr is not allowed to impersonate mapr

Question asked by anthony_alteom on Jun 3, 2014
Latest reply on Jan 22, 2015 by zaheer.shaik
Hi,

I tried to run a java Map Reduce job with Hue but Oozie sends this error :

    JA009: User: mapr is not allowed to impersonate mapr

I tried multiple configurations in oozie-site.xml and core-site.xml :

 - For hosts, I tried wildcard, the name of the server which hosts hue and oozie, a list with all my node names
 - For groups, I also tried wildcard, a list of groups, the mapr group or a oozie group I just created...

But oozie still returns the same error.

The job works fine when I use the hadoop command line.

Any idea ?

Versions :

 - MapR : 3.1.0.23703.GA
 - Oozie : 4.0.0
 - Hadoop : 0.20.2
 - Hue :2.5.0

Oozie logs from Hue :

    2014-06-04 09:32:52,567  INFO ActionStartXCommand:539 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@:start:] Start action [0000000-140604092959741-oozie-mapr-W@:start:] with user-retry state : userRetryCount [0], userRetryMax [0], userRetryInterval [10]
    2014-06-04 09:32:52,569  WARN ActionStartXCommand:542 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@:start:] [***0000000-140604092959741-oozie-mapr-W@:start:***]Action status=DONE
    2014-06-04 09:32:52,569  WARN ActionStartXCommand:542 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@:start:] [***0000000-140604092959741-oozie-mapr-W@:start:***]Action updated in DB!
    2014-06-04 09:32:52,748  INFO ActionStartXCommand:539 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@parcours] Start action [0000000-140604092959741-oozie-mapr-W@parcours] with user-retry state : userRetryCount [0], userRetryMax [0], userRetryInterval [10]
    2014-06-04 09:32:52,955  WARN MapReduceActionExecutor:542 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@parcours] credentials is null for the action
    2014-06-04 09:32:53,270  WARN ActionStartXCommand:542 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@parcours] Error starting action [parcours]. ErrorType [TRANSIENT], ErrorCode [JA009], Message [JA009: User: mapr is not allowed to impersonate mapr]
    org.apache.oozie.action.ActionExecutorException: JA009: User: mapr is not allowed to impersonate mapr
     at org.apache.oozie.action.ActionExecutor.convertExceptionHelper(ActionExecutor.java:418)
     at org.apache.oozie.action.ActionExecutor.convertException(ActionExecutor.java:392)
     at org.apache.oozie.action.hadoop.JavaActionExecutor.submitLauncher(JavaActionExecutor.java:794)
     at org.apache.oozie.action.hadoop.JavaActionExecutor.start(JavaActionExecutor.java:945)
     at org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:215)
     at org.apache.oozie.command.wf.ActionStartXCommand.execute(ActionStartXCommand.java:60)
     at org.apache.oozie.command.XCommand.call(XCommand.java:280)
     at org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:326)
     at org.apache.oozie.service.CallableQueueService$CompositeCallable.call(CallableQueueService.java:255)
     at org.apache.oozie.service.CallableQueueService$CallableWrapper.run(CallableQueueService.java:175)
     at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
     at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
     at java.lang.Thread.run(Thread.java:744)
    Caused by: org.apache.hadoop.ipc.RemoteException: User: mapr is not allowed to impersonate mapr
     at org.apache.hadoop.ipc.Client.call(Client.java:1142)
     at org.apache.hadoop.ipc.Client.call(Client.java:1088)
     at org.apache.hadoop.ipc.RPC$FailoverInvoker.invoke(RPC.java:540)
     at org.apache.hadoop.mapred.$Proxy23.getDelegationToken(Unknown Source)
     at org.apache.hadoop.mapred.JobClient.getDelegationToken(JobClient.java:2256)
     at org.apache.oozie.service.HadoopAccessorService.createJobClient(HadoopAccessorService.java:400)
     at org.apache.oozie.action.hadoop.JavaActionExecutor.createJobClient(JavaActionExecutor.java:988)
     at org.apache.oozie.action.hadoop.JavaActionExecutor.submitLauncher(JavaActionExecutor.java:743)
     ... 10 more
    2014-06-04 09:32:53,274  INFO ActionStartXCommand:539 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[0000000-140604092959741-oozie-mapr-W@parcours] Next Retry, Attempt Number [1] in [60,000] milliseconds
    2014-06-04 09:32:58,767  INFO KillXCommand:539 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[-] STARTED WorkflowKillXCommand for jobId=0000000-140604092959741-oozie-mapr-W
    2014-06-04 09:32:58,877  WARN CoordActionUpdateXCommand:542 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[-] E1100: Command precondition does not hold before execution, [, coord action is null], Error Code: E1100
    2014-06-04 09:32:58,877  INFO KillXCommand:539 - USER[mapr] GROUP[-] TOKEN[] APP[parcours] JOB[0000000-140604092959741-oozie-mapr-W] ACTION[-] ENDED WorkflowKillXCommand for jobId=0000000-140604092959741-oozie-mapr-W

Outcomes