[FALCON-1970] FALCON failed to schedule a feed in Oozie

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.6.1
• Component/s: falcon-ui, feed, oozie
• Labels: security
• Assignee: Unassigned
• Reporter: mayki
• Created: 18/May/16 09:51
• Updated: 18/May/16 15:26

Description

2016-05-18 09:16:10,147 INFO SLACalculatorMemory:520 - SERVER[clusterA] USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] Running periodic SLA check
2016-05-18 09:16:13,168 INFO BaseJobServlet:520 - SERVER[clusterA] USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] AuthorizationException
org.apache.oozie.service.AuthorizationException: E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/[e-mail] from IP XXXXXXXXXXX
at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:406)
at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:263)
at org.apache.oozie.servlet.BaseJobsServlet.doPost(BaseJobsServlet.java:99)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): Unauthorized connection for super-user: oozie/[e-mail] from IP XXXXXXXXXXX
at org.apache.hadoop.ipc.Client.call(Client.java:1427)
at org.apache.hadoop.hdfs.DistributedFileSystem.getFileStatus(DistributedFileSystem.java:1311)
at org.apache.hadoop.fs.FileSystem.exists(FileSystem.java:1424)
at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:378)
... 26 more
2016-05-18 09:16:13,169 WARN V1JobsServlet:523 - SERVER[clusterA] USER[-] GROUP[-] TOKEN[-] APP[-] JOB[-] ACTION[-] URL[POST http://clusterA:11000/oozie/v2/jobs?action=dryrun&doAs=falcon&user.name=falcon/[e-mail]] error[E0501], E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/[e-mail] from IP XXXXXXXXXXX
org.apache.oozie.servlet.XServletException: E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/[e-mail] from IP XXXXXXXXXXX
at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:271)
at org.apache.oozie.servlet.BaseJobsServlet.doPost(BaseJobsServlet.java:99)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:606)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.oozie.service.AuthorizationException: E0501: Could not perform authorization operation, Unauthorized connection for super-user: oozie/[e-mail] from IP XXXXXXXXXXX
at org.apache.oozie.service.AuthorizationService.authorizeForApp(AuthorizationService.java:406)
at org.apache.oozie.servlet.BaseJobServlet.checkAuthorizationForApp(BaseJobServlet.java:263)
... 25 more
Caused by: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): Unauthorized connection for super-user: oozie/[e-mail] from IP XXXXXXXXXXX
at org.apache.hadoop.ipc.Client.call(Client.java:1427)
at org.apache.hadoop.ipc.Client.call(Client.java:1358)