Uploaded image for project: 'Falcon'
  1. Falcon
  2. FALCON-559

Unable to start oozie server due to Kerberos authentication error

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Not A Problem
    • Affects Version/s: 0.6
    • Fix Version/s: None
    • Component/s: oozie
    • Labels:
      None

      Description

      Hi, falcon dev

      Our group is trying to deploy falcon on cluster. And our oozie is using Kerberos as authentication mech. Now I encounter such error when submit clusters which I think is related to the oozie authentication. Is there anything we can do to solve this issue? I am pretty sure the oozie server is up, because I can open oozie server's UI through my browser. Could you please have a look at this?

      Thanks,
      Peng

      ----------------------------------Log---------------------------------------------

      -07-30 15:36:06,577 ERROR - [31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster 69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Unable to persist entity object (AbstractEntityManager:157)
      org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server or port: https://10.24.156.43:4443/oozie/
      at org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
      at org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
      at org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
      at org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
      at org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
      at org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
      at org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      at java.lang.reflect.Method.invoke(Method.java:601)
      at org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
      at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
      at org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      at java.lang.reflect.Method.invoke(Method.java:601)
      at com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
      at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
      at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
      at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
      at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
      at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
      at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
      at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
      at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
      at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
      at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
      at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
      at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
      at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
      at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
      at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
      at org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
      at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
      at org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
      at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
      at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
      at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
      at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
      at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
      at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
      at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
      at org.mortbay.jetty.Server.handle(Server.java:326)
      at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
      at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
      at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
      at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
      at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
      at org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
      at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
      at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
      Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
      at org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:123)
      at org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
      ... 59 more
      Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
      at org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
      ... 60 more
      Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
      at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
      at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
      at org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
      at org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
      at org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
      at org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
      at org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
      at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
      at org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
      ... 61 more
      Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
      at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
      at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
      at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
      at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
      at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
      at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
      at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
      at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
      at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
      at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
      at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
      at org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
      at org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
      at org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
      at org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
      at org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
      at java.security.AccessController.doPrivileged(Native Method)
      at javax.security.auth.Subject.doAs(Subject.java:415)
      at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
      at org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
      at org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)

      at org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
      ... 70 more
      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
      at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
      at sun.security.validator.Validator.validate(Validator.java:260)
      at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
      at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
      at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
      at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
      ... 92 more
      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
      at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
      at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
      ... 98 more
      2014-07-30 15:36:06,581 ERROR - [31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster 69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Failure reason (FalconWebException:41)
      org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server or port: https://10.24.156.43:4443/oozie/ at org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
      at org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
      at org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
      at org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
      at org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
      at org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
      at org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      at java.lang.reflect.Method.invoke(Method.java:601)
      at org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
      at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
      at org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
      at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      at java.lang.reflect.Method.invoke(Method.java:601)
      at com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
      at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$TypeOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:185)
      at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
      at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
      at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
      at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
      at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
      at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
      at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
      at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
      at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
      at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
      at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
      at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
      at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
      at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
      at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
      at org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
      at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
      at org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
      at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
      at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
      at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
      at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
      at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
      at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
      at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
      at org.mortbay.jetty.Server.handle(Server.java:326)
      at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
      at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
      at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
      at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
      at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
      at org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
      at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
      at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
      Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.

      at org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
      ... 59 more
      Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
      at org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
      ... 60 more
      Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
      at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
      at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
      at org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
      at org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
      at org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
      at org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
      at org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
      at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
      at org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
      ... 61 more
      Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
      at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
      at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
      at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
      at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
      at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
      at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
      at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
      at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
      at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
      at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
      at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
      at org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
      at org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
      at org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
      at org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
      at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
      at org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
      at org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
      at org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
      at org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
      at org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
      at java.security.AccessController.doPrivileged(Native Method)
      at javax.security.auth.Subject.doAs(Subject.java:415)
      at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
      at org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
      at org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
      at org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
      ... 70 more
      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
      at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
      at sun.security.validator.Validator.validate(Validator.java:260)
      at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
      at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
      at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
      at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
      ... 92 more
      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
      at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
      at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
      ... 98 more
      2014-07-30 15:36:06,584 ERROR - [31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster 69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Action failed: Bad Request
      Error: Invalid Workflow server or port: https://10.24.156.43:4443/oozie/
      Unable to reach Oozie server. (FalconWebException:67)

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              penn Peng
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: