This is the documentation for Cloudera Manager 5.1.x. Documentation for other versions is available at Cloudera Documentation.

Configuring SSL for Oozie

Required Role:

Before You Begin

  • Keystores for Oozie must be readable by the oozie user. This could be a copy of the Hadoop services' keystore with permissions 0440 and owned by the oozie group.
  • Truststores must have permissions 0444 (that is, readable by all).
  • Specify absolute paths to the keystore and truststore files. These settings apply to all hosts on which daemon roles of the Oozie service run. Therefore, the paths you choose must be valid on all hosts.
  • In case there is a DataNode and an Oozie server running on the same host, they can use the same certificate.

Procedure

The steps for configuring and enabling Hadoop SSL for Oozie are as follows:
  1. Open the Cloudera Manager Admin Console and navigate to the Oozie service.
  2. Click Configuration.
  3. In the Search field, type SSL to show the Oozie SSL properties (found under the Service-Wide > Security category).
  4. Edit the following SSL properties according to your cluster configuration.
    Table 1. Oozie SSL Properties
    Property Description
    Use SSL Check this field to enable SSL for Oozie.
    Oozie SSL Keystore File Location of the keystore file on the local file system.
    Oozie SSL Keystore Password Password for the keystore.
  5. Click Save Changes.
  6. Restart the Oozie service.
Page generated September 3, 2015.