In this section, we will use Cloudera Manager to configure Kerberos for our cluster running CDH5.
At the time of installation, CDH5 creates the following users:
hdfs
: This user runs the namenode, datanodes, and secondary namenode daemons. The following screenshot shows thehdfs
user as the owner of the namenode service:mapred
: This user runs the jobtracker and tasktracker daemons when using the MRv1, and job history server daemon when using YARN (MRv2).yarn
: This user runs the resource manager and node manager daemons.hue
: This user runs the Hue Server, Beeswax Server, Authentication Manager, and Job Designer daemons.
In addition to the preceding users, the Cloudera Manager also creates a user called cloudera-scm
. We will need to set up authentication for all of these users in Kerberos.