Peng created FALCON-559:
---------------------------

             Summary: Unable to start oozie server due to Kerberos 
authentication error
                 Key: FALCON-559
                 URL: https://issues.apache.org/jira/browse/FALCON-559
             Project: Falcon
          Issue Type: Bug
          Components: oozie
    Affects Versions: 0.6
            Reporter: Peng


Hi, falcon dev

Our group is trying to deploy falcon on cluster. And our oozie is using 
Kerberos as authentication mech. Now I encounter such error when submit 
clusters which I think is related to the oozie authentication. Is there 
anything we can do to solve this issue? I am pretty sure the oozie server is 
up, because I can open oozie server's UI through my browser. Could you please 
have a look at this?

Thanks,
Peng

-----------------------------------Log----------------------------------------------

-07-30 15:36:06,577 ERROR - 
[31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster 
69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Unable to persist entity object 
(AbstractEntityManager:157)
org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server or 
port: https://10.24.156.43:4443/oozie/
        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
        at 
org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
        at 
org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
        at 
org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
        at 
org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:601)
        at 
org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
        at 
org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
        at 
org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:601)
        at 
com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
at 
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
        at 
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
        at 
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
        at 
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
        at 
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
        at 
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
        at 
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
        at 
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
        at 
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
        at 
org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
        at 
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
        at 
org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
        at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
        at org.mortbay.jetty.Server.handle(Server.java:326)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
        at 
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
        at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
        at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
        at 
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
        at 
org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
        at 
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
        at 
org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:123)
        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
        ... 59 more
Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
        at 
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
  at 
org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
        ... 60 more
Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
        at 
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
        at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
        at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
        at 
org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
        at 
org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
        at 
org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
        at 
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
        at 
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
        at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
        at 
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
        ... 61 more
Caused by: javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
        at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
        at 
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
        at 
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
        at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
        at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
        at 
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
        at 
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
        at 
sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
        at 
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
        at 
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
        at 
org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
        at 
org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
        at 
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
        at 
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAs(Subject.java:415)
        at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
        at 
org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
        at 
org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
                                                                                
                                    
        at 
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
        ... 70 more
Caused by: sun.security.validator.ValidatorException: PKIX path building 
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
        at 
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
        at sun.security.validator.Validator.validate(Validator.java:260)
        at 
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
        at 
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
        at 
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
        at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
        ... 92 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable 
to find valid certification path to requested target
        at 
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
        at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
        ... 98 more
2014-07-30 15:36:06,581 ERROR - 
[31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster 
69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Failure reason (FalconWebException:41)
org.apache.falcon.entity.parser.ValidationException: Invalid Workflow server or 
port: https://10.24.156.43:4443/oozie/        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:145)
        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:75)
        at 
org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:48)
        at 
org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:365)
        at 
org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:332)
        at 
org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:154)
        at 
org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:601)
        at 
org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:124)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:416)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:126)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$AjcClosure1.run(SchedulableEntityManagerProxy.java:1)
        at 
org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
        at 
org.apache.falcon.aspect.AbstractFalconAspect.logAround(AbstractFalconAspect.java:51)
        at 
org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit(SchedulableEntityManagerProxy.java:107)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:601)
        at 
com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
        at 
com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$TypeOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:185)
        at 
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
        at 
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:288)
        at 
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
        at 
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
        at 
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
        at 
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1469)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1400)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1349)
        at 
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1339)
        at 
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
        at 
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:537)
        at 
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:699)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at 
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1221)
        at 
org.apache.falcon.security.BasicAuthFilter$2.doFilter(BasicAuthFilter.java:184)
        at 
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:392)
        at 
org.apache.falcon.security.BasicAuthFilter.doFilter(BasicAuthFilter.java:222)
        at 
org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
        at 
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
        at 
org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
        at 
org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
        at 
org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
        at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
        at 
org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
        at org.mortbay.jetty.Server.handle(Server.java:326)
        at 
org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
        at 
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
        at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
        at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
        at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
        at 
org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
        at 
org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:713)
        at 
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
Caused by: org.apache.falcon.FalconException: Unable to reach Oozie server.
                                  

       at 
org.apache.falcon.entity.parser.ClusterEntityParser.validateWorkflowInterface(ClusterEntityParser.java:141)
        ... 59 more
Caused by: AUTHENTICATION : IO_ERROR : javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
        at 
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:156)
        at 
org.apache.falcon.workflow.engine.OozieWorkflowEngine.isAlive(OozieWorkflowEngine.java:121)
        ... 60 more
Caused by: IO_ERROR : javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
        at 
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:312)
        at org.apache.oozie.client.OozieClient.createURL(OozieClient.java:395)
        at org.apache.oozie.client.OozieClient.access$000(OozieClient.java:76)
        at 
org.apache.oozie.client.OozieClient$ClientCallable.call(OozieClient.java:473)
        at 
org.apache.oozie.client.OozieClient.getSystemMode(OozieClient.java:1489)
        at 
org.apache.oozie.client.ProxyOozieClient.access$201(ProxyOozieClient.java:49)
        at 
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:152)
        at 
org.apache.oozie.client.ProxyOozieClient$2.call(ProxyOozieClient.java:149)
        at org.apache.oozie.client.OozieClient.doAs(OozieClient.java:191)
        at 
org.apache.oozie.client.ProxyOozieClient.getSystemMode(ProxyOozieClient.java:149)
        ... 61 more
Caused by: javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1886)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
        at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341)
        at 
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868)
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:804)
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)
        at 
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
        at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)
        at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)
        at 
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:515)
        at 
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
        at 
sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
        at 
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
        at 
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
        at 
org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
        at 
org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
        at 
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
           at 
org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
        at 
org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
        at 
org.apache.oozie.client.AuthOozieClient.createConnection(AuthOozieClient.java:128)
        at 
org.apache.oozie.client.ProxyOozieClient.access$001(ProxyOozieClient.java:49)
        at 
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:88)
        at 
org.apache.oozie.client.ProxyOozieClient$1.run(ProxyOozieClient.java:86)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAs(Subject.java:415)
        at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1588)
        at 
org.apache.oozie.client.ProxyOozieClient.createConnection(ProxyOozieClient.java:86)
        at 
org.apache.oozie.client.OozieClient.getSupportedProtocolVersions(OozieClient.java:321)
        at 
org.apache.oozie.client.OozieClient.validateWSVersion(OozieClient.java:282)
        ... 70 more
Caused by: sun.security.validator.ValidatorException: PKIX path building 
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
        at 
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
        at sun.security.validator.Validator.validate(Validator.java:260)
        at 
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
        at 
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
        at 
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
        at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
        ... 92 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable 
to find valid certification path to requested target
        at 
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
        at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
        ... 98 more
2014-07-30 15:36:06,584 ERROR - 
[31371780@qtp-1184670-2:pengzhang:POST//entities/submit/cluster 
69619af8-b63c-4527-bd49-3e93bedcb9ed] ~ Action failed: Bad Request
Error: Invalid Workflow server or port: https://10.24.156.43:4443/oozie/
Unable to reach Oozie server. (FalconWebException:67)                           
                                                             




--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to