[OOZIE-2111] Kerberized Oozie doesn't allow connections from users with a lot of groups

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.2.0
• Component/s: security
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 13/Jan/15 20:02
• Updated: 18/May/15 07:11
• Resolved: 13/Jan/15 23:54

Description

If you try to use the Oozie CLI in a Kerberized environment with a user in a lot of groups (e.g. the groups list is 30+ lines), all commands fails with

Error: AUTHENTICATION : Could not authenticate, Authentication failed, status: 400

We need to increase the maxHttpHeaderSize that Tomcat allows from the default, 8192 (8K), to 65536 (64K).