Oozie web UI Throws Security Exception After Being Up for a Day on the Oracle Big Data Appliance (Doc ID 1956915.1)

Last updated on OCTOBER 11, 2016

Applies to:

Big Data Appliance Integrated Software - Version 3.0 and later
Linux x86-64

Symptoms

On Oracle Big Data Appliance with secure cluster enabled authentication for the Oozie web UI, observing a behavior where the Oozie web UI can only be accessed for a day or so. But after a day below error is thrown:


org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to admin@
  at org.apache.hadoop.security.authentication.util.KerberosName.getShortName(KerberosName.java:389)
  at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler$2.run(KerberosAuthenticationHandler.java:359)
  at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler$2.run(KerberosAuthenticationHandler.java:329)
  at java.security.AccessController.doPrivileged(Native Method)
  at javax.security.auth.Subject.doAs(Subject.java:415)
  at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.authenticate(KerberosAuthenticationHandler.java:329)
  at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:349)
  at org.apache.oozie.servlet.AuthFilter.doFilter(AuthFilter.java:131)
  at org.apache.oozie.servlet.HostnameFilter.doFilter(HostnameFilter.java:84)

After restart of Oozie, the error goes away and the UI starts working again for a day or so

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms