Configuring Kerberos for Apache Hadoop
In this section, we will use Cloudera Manager to configure Kerberos for our cluster running CDH5.
At the time of installation, CDH5 creates the following users:
hdfs: This user runs the namenode, datanodes, and secondary namenode daemons. The following screenshot shows thehdfsuser as the owner of the namenode service:
mapred: This user runs the jobtracker and tasktracker daemons when using the MRv1, and job history server daemon when using YARN (MRv2).yarn: This user runs the resource manager and node manager daemons.oozie: The user runs the Oozie server.hue: This user runs the Hue Server, Beeswax Server, Authentication Manager, and Job Designer daemons.
In addition to the preceding users, the Cloudera Manager also creates a user called cloudera-scm. We will need to set up authentication for all of these users in Kerberos.
Configuring Kerberos principal for Cloudera Manager Server
Execute the following steps as the root user from node1.hcluser to configure...