[OOZIE-800] Job start/kill gives authorization error

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 3.2.0
• Fix Version/s: 3.2.0
• Labels: oozie
• Assignee: Mona Chitnis
• Reporter: Mona Chitnis
• Due: 04/Apr/12
• Created: 03/Apr/12 00:34
• Updated: 09/Mar/16 05:30
• Resolved: 10/Apr/12 00:16

Description

Job cannot be started with option 'start' after 'submit'. Option 'run' works ok.
Job cannot be killed in either case.

$ oozie job -submit -config job.properties
<job-id>
$ oozie job -start <job-id>
Error: E0508 : E0508: User [?] not authorized for WF job
[<job-id>]
$ oozie job -kill <job-id>
Error: E0508 : E0508: User [?] not authorized for WF job
[<job-id>]

Same behavior for coordinator and bundle jobs - Error E0509

A part of the stacktrace

at org.apache.oozie.service.AuthorizationService.isUserInAcl(AuthorizationService.java:371)
at org.apache.oozie.service.AuthorizationService.authorizeForJob(AuthorizationService.java:405)
at org.apache.oozie.servlet.BaseJobServlet.doPut(BaseJobServlet.java:74)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:640)
at org.apache.oozie.servlet.JsonRestServlet.service(JsonRestServlet.java:285)

Issue Links

• relates to: HADOOP-10398 KerberosAuthenticator failed to fall back to PseudoAuthenticator after HADOOP-10078
• relates to: HADOOP-10416 For pseudo authentication, what to do if there is an expired token?
• relates to: HADOOP-10078 KerberosAuthenticator always does SPNEGO