https://community.cloudera.com/t5/Support-Questions/After-enabling-kerberos-local-MIT-unable-to-access-the-HDFS/m-p/280102#M208677 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/19178">@saivenkatg55</a>&nbsp;</P><P>What do you mean by local (MIT) if I guess right you are accessing the HDP cluster from a client laptop or edge node where you installed the Kerberos client libraries. To communicate with secure Hadoop clusters that use Kerberos authentication, known as Kerberized clusters, a client uses the Kerberos client utilities. You MUST install these utilities on the same system where you are connecting from.</P><P>For Linux desktops here are the different options</P><P><STRONG>Ubunt: # apt install krb5-user</STRONG><BR /><STRONG>RHEL/Centos: # yum install -y krb5-server krb5-libs krb5-workstation</STRONG></P><P>These packages deliver the krb5.conf that the client should configure to connect to a kerberized cluster, the easier and recommended way is to copy the krb5.conf from the kdc server to all clients that need to connect to the Kerberized cluster in RHEL/CentOS it's located in /etc/krb5.conf. This file has the pointer to the REALM, KDC and ADMIN server</P><P>Here is an example</P><P><FONT color="#FF6600">[logging]</FONT><BR /><FONT color="#FF6600">default = FILE:/var/log/krb5libs.log</FONT><BR /><FONT color="#FF6600">kdc = FILE:/var/log/krb5kdc.log</FONT><BR /><FONT color="#FF6600">admin_server = FILE:/var/log/kadmind.log</FONT><BR /><FONT color="#FF6600">[libdefaults]</FONT><BR /><FONT color="#FF6600">default_realm = REDHAT.COM</FONT><BR /><FONT color="#FF6600">dns_lookup_realm = false</FONT><BR /><FONT color="#FF6600">dns_lookup_kdc = false</FONT><BR /><FONT color="#FF6600">ticket_lifetime = 24h</FONT><BR /><FONT color="#FF6600">renew_lifetime = 7d</FONT><BR /><FONT color="#FF6600">forwardable = true</FONT><BR /><FONT color="#FF6600">[realms]</FONT><BR /><FONT color="#FF6600">REDHAT.COM = {</FONT><BR /><FONT color="#FF6600">kdc = KDC.REDHAT.COM</FONT><BR /><FONT color="#FF6600">admin_server = KDC.REDHAT.COM</FONT><BR /><FONT color="#FF6600">}</FONT><BR /><FONT color="#FF6600">[domain_realm]</FONT><BR /><FONT color="#FF6600">.redhat.com = REDHAT.COM </FONT><BR /><FONT color="#FF6600">redhat.com = REDHAT.COM</FONT></P><P><BR />Else share /var/log/kadmind.log and /var/log/kadmind.log</P><P>&nbsp;</P><P>HTH</P> Mon, 14 Oct 2019 17:51:19 GMT Shelton 2019-10-14T17:51:19Z