question Re: non-Kerberized HDF communication with Kerberized HDP in Archives of Support Questions (Read Only)

non-Kerberized HDF communication with Kerberized HDP

dmmontague — Tue, 21 Apr 2026 12:22:13 GMT

Would someone please send me information on how to set up a non-kerberized HDF to communicate with a kerberized HDP cluster. I know how to set this up on a standalone but the procedures haven't proved successful on a HDF cluster.

Re: non-Kerberized HDF communication with Kerberized HDP

jfrazee — Sat, 08 Jul 2017 00:04:29 GMT

@Debra Montague To do this, you will have to do 3 things:

Set nifi.kerberos.krb5.file=/etc/krb5.conf or whatever in your ./conf/nifi.properties file on all HDF cluster nodes
Make sure that the appropriate keytab is accessible on all HDF cluster nodes (i.e., copy or syndicate the keytabs to every node)
Configure the Put/Get/List/FetchHDFS processor with the "Kerberos Keytab" set to the path of the keytab and "Kerberos Principal" set to a principal in that keytab

You might find some of these articles helpful:

Last, if possible you should verify that you can do an hdfs -ls when kinit'd to the principal you're using with the keytab you've specified in the processor properties configuration.

Re: non-Kerberized HDF communication with Kerberized HDP

dmmontague — Sat, 08 Jul 2017 00:17:03 GMT

I will try this on next week and let you know the results.

Thanks,

Debra,