CDH 5.9 - HUE 3.11. User: hue is not allowed to impersonate <user> (error 403)

[Jesús Asturiano]

Hi Hue community,

I've deployed CDH using parcels and when try to open Search Examples I'm facing this error:

User: hue is not allowed to impersonate oracle

As I can't create users in the server, hue process is running using "oracle" user.

In the server log:

search_controller ERROR    failed to get index aliases
Traceback (most recent call last):
  File "/CDH-5.9.1-1.cdh5.9.1.p0.4/lib/hue/apps/search/src/search/search_controller.py", line 125, in get_all_indexes
    indexes += SolrApi(SOLR_URL.get(), self.user).aliases().keys()
  File "/CDH-5.9.1-1.cdh5.9.1.p0.4/lib/hue/desktop/libs/libsolr/src/libsolr/api.py", line 494, in aliases
    raise PopupException(e, title=_('Error while accessing Solr'))
PopupException: {
  "RemoteException" : {
    "message" : "User: hue is not allowed to impersonate oracle",
    "exception" : "AuthorizationException",
    "javaClassName" : "org.apache.hadoop.security.authorize.AuthorizationException"
  }

} (error 403)

I've followed the instructions about proxy configuration... in core-site.xml: 

  <property>
    <name>hadoop.proxyuser.hue.hosts</name>
    <value>*</value>
  </property>
  <property>
    <name>hadoop.proxyuser.hue.groups</name>
    <value>*</value>
  </property>

<property>
    <name>hadoop.proxyuser.oracle.hosts</name>
    <value>*</value>
  </property>
  <property>
    <name>hadoop.proxyuser.oracle.groups</name>
    <value>*</value>
  </property>

Besides I've put these entries in hue's valve files: (hue_safety_valve.ini and hue_safety_valve_server.ini)

server_user=oracle
server_group=dba

And Solr configuration thru Cloudera Manager is:

SOLR_SECURITY_PROXYUSER_oracle_GROUPS=*
SOLR_SECURITY_PROXYUSER_oracle_HOSTS=*

SOLR_SECURITY_ALLOWED_PROXYUSERS=oracle

I've modified solr file in /CDH-5.9.1-1.cdh5.9.1.p0.4/etc/default with:

SOLR_SECURITY_ALLOWED_PROXYUSERS=hue,oracle
SOLR_SECURITY_PROXYUSER_hue_HOSTS=*
SOLR_SECURITY_PROXYUSER_hue_GROUPS=*
SOLR_SECURITY_PROXYUSER_oracle_HOSTS=*
SOLR_SECURITY_PROXYUSER_oracle_GROUPS=*

However CM doesn't show hue as proxy user in Solr -> Processes menu

Fresh ideas and comments are welcome,

Thanks!