[OOZIE-1172] Add documentation on how to get Java actions to authenticate properly on Kerberos-enabled clusters

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: trunk
• Fix Version/s: 3.3.2
• Component/s: docs
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 16/Jan/13 21:23
• Updated: 20/Jul/13 00:03
• Resolved: 28/Jan/13 23:24

Description

If a user tries to use a Java action (so they've written their own Java main method) on a Kerberos-enabled cluster it will fail because they need to propagate the delegation token like this (taken from the MapReduce action):

// propagate delegation related props from launcher job to MR job
if (System.getenv("HADOOP_TOKEN_FILE_LOCATION") != null) {
    jobConf.set("mapreduce.job.credentials.binary", System.getenv("HADOOP_TOKEN_FILE_LOCATION"));
}

We should document this somewhere.