Peng created FALCON-559:
---------------------------
Summary: Unable to start oozie server due to Kerberos
authentication error
Key: FALCON-559
URL: https://issues.apache.org/jira/browse/FALCON-559
Project: Falcon
Issue Type: Bug
Components: oozie
Affects Versions: 0.6
Reporter: Peng
Hi, falcon dev
Our group is trying to deploy falcon on cluster. And our oozie is using
Kerberos as authentication mech. Now I encounter such error when submit
clusters which I think is related to the oozie authentication. Is there
anything we can do to solve this issue? I am pretty sure the oozie server is
up, because I can open oozie server's UI through my browser. Could you please
have a look at this?
Thanks,
Peng
-----------------------------------Log----------------------------------------------
-07-30 15:36:06,577 ERROR -
[31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster
69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Unable to persist entity object
(AbstractEntityManager:157)
org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server or
port: https://10.24.156.43:4443/oozie/
at
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
at
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
at
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
at
org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
at
org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
at
org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
at
org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at
org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
at
org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
at
org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at
com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
at
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
at
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
at
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
at
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
at
org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
at
org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
at
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
at
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
at
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
at
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
at
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
at
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
at
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
at
org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
at
org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:123)
at
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
... 59 more
Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
at
org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
... 60 more
Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
at
org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
at
org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
at
org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
at
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
at
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
at
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
... 61 more
Caused by: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
at
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
at
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
at
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
at
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at
sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
at
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
at
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
at
org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
at
org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
at
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
at
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
at
org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
at
org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
at
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
... 70 more
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
at sun.security.validator.Validator.validate(Validator.java:260)
at
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
at
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
at
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
... 92 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
... 98 more
2014-07-30 15:36:06,581 ERROR -
[31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster
69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Failure reason (FalconWebException:41)
org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server or
port: https://10.24.156.43:4443/oozie/ at
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
at
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
at
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
at
org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
at
org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
at
org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
at
org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at
org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
at
org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
at
org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
at
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at
com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
at
com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$TypeOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:185)
at
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
at
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
at
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
at
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
at
org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
at
org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
at
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
at
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
at
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
at
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
at
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
at
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
at
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
at
org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
at
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
... 59 more
Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
at
org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
... 60 more
Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
at
org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
at
org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
at
org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
at
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
at
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
at
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
... 61 more
Caused by: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
at
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
at
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
at
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
at
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at
sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
at
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
at
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
at
org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
at
org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
at
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
at
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
at
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
at
org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
at
org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
at
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
at
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
at
org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
at
org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
at
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
... 70 more
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
at sun.security.validator.Validator.validate(Validator.java:260)
at
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
at
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
at
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
... 92 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
... 98 more
2014-07-30 15:36:06,584 ERROR -
[31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster
69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Action failed: Bad Request
Error: Invalid Workflow server or port: https://10.24.156.43:4443/oozie/
Unable to reach Oozie server. (FalconWebException:67)
--
This message was sent by Atlassian JIRA
(v6.2#6252)