question Re: Running into auth_to_local rule issue during Livy kerberos authentication in Support Questions

question Re: Running into auth_to_local rule issue during Livy kerberos authentication in Support Questions https://community.cloudera.com/t5/Support-Questions/Running-into-auth-to-local-rule-issue-during-Livy-kerberos/m-p/296835#M218447 Thanks Bender.  I appreciate the response.  Just want to clarify a few things.. * Livy itself is running as livyblauser@COMPANY.PRI* mzeoli@COMPANY.PRI is the user hitting the livy Web UI.* Both livyblauser and mzeoli are AD accounts and have rights on the edge node livy is running on (nydc-pblalivy01, which is same box the HTTP service principal is for)* Both have permission to read krb5.conf   (its world readable, though I'm not sure why / how something would be hitting krb5.conf as mzeoli, since mzeoli is just the web UI user and should not own any process.  Or perhaps I misunderstood you) Given that this works... <PRE>[livyblauser@nydc-pblalivy01 hadoop]$ hadoop org.apache.hadoop.security.HadoopKerberosName mzeoli@COMPANY.PRI Name: mzeoli@COMPANY.PRI to mzeoli</PRE> ....It really feels like Livy isn't finding the rules it would expect to find, though I see the correct rules in /etc/hadoop/conf/core-site.xml. <PRE><name>hadoop.security.auth_to_local</name> <value> RULE:[1:$1@$0](.*@\QBD.COMPANY.PRI\E$)s/@\QBD.COMPANY.PRI\E$// RULE:[2:$1@$0](.*@\QBD.COMPANY.PRI\E$)s/@\QBD.COMPANY.PRI\E$// RULE:[1:$1@$0](.*@\QCOMPANY.PRI\E$)s/@\QCOMPANY.PRI\E$// RULE:[2:$1@$0](.*@\QCOMPANY.PRI\E$)s/@\QCOMPANY.PRI\E$// DEFAULT </value></PRE> Thanks,Mike Thu, 28 May 2020 20:41:12 GMT MikeZ 2020-05-28T20:41:12Z