Hadoop user failing with the error "AuthorizationException: not allowed to impersonate"
Article ID: KB0076237
Updated On:
| Products | Versions |
|---|---|
| TIBCO ActiveMatrix BusinessWorks Plug-in for Big Data | 6.x |
Description
The HadoopActivity of TIBCO ActiveMatrix BusinessWorks(TM) Plug-in for Big Data failing with below error:
<ns0:HadoopException xmlns:ns0="http://schemas.tibco.com/bw/plugins/hadoop/HadoopExceptions">
<msg>Error Occurred: com.tibco.plugin.hadoop.hdfs.exception.HDFSCommonException: {"error":"User: hadoopusr is not allowed to impersonate hadoopusr"};
Cause:
Since the SuperUser Settings were not updated in the core-site.xml file, it fails with the above error.
Impersonation grants a user (also known as a SuperUser or ProxyUser) right to access Hadoop. The user is granted access on behalf of other users.The issue is seen since the user "hadoopusr" was not able to impersonate user "hadoopusr".
<ns0:HadoopException xmlns:ns0="http://schemas.tibco.com/bw/plugins/hadoop/HadoopExceptions">
<msg>Error Occurred: com.tibco.plugin.hadoop.hdfs.exception.HDFSCommonException: {"error":"User: hadoopusr is not allowed to impersonate hadoopusr"};
Cause:
Since the SuperUser Settings were not updated in the core-site.xml file, it fails with the above error.
Impersonation grants a user (also known as a SuperUser or ProxyUser) right to access Hadoop. The user is granted access on behalf of other users.The issue is seen since the user "hadoopusr" was not able to impersonate user "hadoopusr".
Issue/Introduction
Hadoop user failing with the error "AuthorizationException: not allowed to impersonate"
Environment
Product: TIBCO ActiveMatrix BusinessWorks(TM) Plug-in for Big Data
Version: 6.x
OS: All Supported Operating Systems
Resolution
To resolve this issue follow the below steps:
1.Ensure that the following properties set is added in the core-site.xml and if not, add the following
<property>
<name>hadoop.proxyuser.hadoopusr.hosts</name>
<value>*</value>
</property>
<property>
<name>hadoop.proxyuser.hadoopusr.groups</name>
<value>*</value>
</property>
This will allow the DIS user (hadoopusr) to impersonate as any other user. If you need to customize the hosts and groups, provide the values accordingly.
2.Save the above changes and restart the Cluster.
1.Ensure that the following properties set is added in the core-site.xml and if not, add the following
<property>
<name>hadoop.proxyuser.hadoopusr.hosts</name>
<value>*</value>
</property>
<property>
<name>hadoop.proxyuser.hadoopusr.groups</name>
<value>*</value>
</property>
This will allow the DIS user (hadoopusr) to impersonate as any other user. If you need to customize the hosts and groups, provide the values accordingly.
2.Save the above changes and restart the Cluster.
Feedback
Yes
No
Powered by
