For YARN,add following properties in yarn-site.xml:
<!-- resource manager secure configuration info -->
<property>
<name>yarn.resourcemanager.principal</name>
<value><PRINCIPAL></value>
</property>
<property>
<name>yarn.resourcemanager.keytab</name>
<value><KEYTAB_PATH></value>
</property>
<!-- remember the principal for the node manager is the principal for the host this yarn-site.xml file is on -->
<!-- these (next four) need only be set on node manager nodes -->
<property>
<name>yarn.nodemanager.principal</name>
<value><PRINCIPAL></value>
</property>
<property>
<name>yarn.nodemanager.keytab</name>
<value><KEYTAB_PATH></value>
</property>
<!--<property>
<name>yarn.nodemanager.container-executor.class</name>
<value>org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor</value>
</property>
<property>
<name>yarn.nodemanager.linux-container-executor.group</name>
<value>yarn</value>
</property> -->
<!-- OPTIONAL - set these to enable secure proxy server node -->
<property>
<name>yarn.web-proxy.keytab</name>
<value><KEYTAB_PATH></value>
</property>
<property>
<name>yarn.web-proxy.principal</name>
<value><PRINCIPAL></value>
</property>
<!--<property>
<name>yarn.nodemanager.pmem-check-enabled</name>
<value>false</value>
</property>
<property>
<name>yarn.nodemanager.vmem-check-enabled</name>
<value>false</value>
</property> -->
<!-- resource manager secure configuration info -->
<property>
<name>yarn.resourcemanager.principal</name>
<value><PRINCIPAL></value>
</property>
<property>
<name>yarn.resourcemanager.keytab</name>
<value><KEYTAB_PATH></value>
</property>
<!-- remember the principal for the node manager is the principal for the host this yarn-site.xml file is on -->
<!-- these (next four) need only be set on node manager nodes -->
<property>
<name>yarn.nodemanager.principal</name>
<value><PRINCIPAL></value>
</property>
<property>
<name>yarn.nodemanager.keytab</name>
<value><KEYTAB_PATH></value>
</property>
<!--<property>
<name>yarn.nodemanager.container-executor.class</name>
<value>org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor</value>
</property>
<property>
<name>yarn.nodemanager.linux-container-executor.group</name>
<value>yarn</value>
</property> -->
<!-- OPTIONAL - set these to enable secure proxy server node -->
<property>
<name>yarn.web-proxy.keytab</name>
<value><KEYTAB_PATH></value>
</property>
<property>
<name>yarn.web-proxy.principal</name>
<value><PRINCIPAL></value>
</property>
<!--<property>
<name>yarn.nodemanager.pmem-check-enabled</name>
<value>false</value>
</property>
<property>
<name>yarn.nodemanager.vmem-check-enabled</name>
<value>false</value>
</property> -->
0 comments to "Setting up Kerberos enabled YARN"
Powered by Blogger.
Post a Comment