For YARN,add following properties in yarn-site.xml:

<!-- resource manager secure configuration info -->

<property>
  <name>yarn.resourcemanager.principal</name>
  <value><PRINCIPAL></value>
</property>

<property>
  <name>yarn.resourcemanager.keytab</name>
  <value><KEYTAB_PATH></value>
</property>

<!-- remember the principal for the node manager is the principal for the host this yarn-site.xml file is on -->

<!-- these (next four) need only be set on node manager nodes -->

<property>
  <name>yarn.nodemanager.principal</name>
  <value><PRINCIPAL></value>
</property>

<property>
  <name>yarn.nodemanager.keytab</name>
  <value><KEYTAB_PATH></value>
</property>

<!--<property>
  <name>yarn.nodemanager.container-executor.class</name>
  <value>org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor</value>
</property>

<property>
  <name>yarn.nodemanager.linux-container-executor.group</name>
  <value>yarn</value>
</property> -->

<!-- OPTIONAL - set these to enable secure proxy server node -->

<property>
  <name>yarn.web-proxy.keytab</name>
  <value><KEYTAB_PATH></value>
</property>

<property>
  <name>yarn.web-proxy.principal</name>
  <value><PRINCIPAL></value>
</property>
<!--<property>
    <name>yarn.nodemanager.pmem-check-enabled</name>
    <value>false</value>
</property>

<property>
    <name>yarn.nodemanager.vmem-check-enabled</name>
    <value>false</value>
</property> -->


0 comments to "Setting up Kerberos enabled YARN"

Post a Comment

Powered by Blogger.