question When a service is removed from a kerborized cluster authenticating with Active Directory, is the associated service principal removed from the corresponding Active Directory OU? in Archives of Support Questions (Read Only)

When a service is removed from a kerborized cluster authenticating with Active Directory, is the associated service principal removed from the corresponding Active Directory OU?

TerryP — Fri, 16 Sep 2022 09:44:51 GMT

When a cluster is kerborized using Active Directory as the KDC, the service principals are created in the AD OU for the Hadoop realm. If a service, such as Storm, is removed from the cluster will this cause the entry in Active Directory to be removed as well?

Re: When a service is removed from a kerborized cluster authenticating with Active Directory, is the associated service principal removed from the corresponding Active Directory OU?

nsabharwal — Tue, 20 Oct 2015 17:22:36 GMT

@terry@hortonworks.com Based on my experience with MIT, Yes

Based on my experience with AD KDC , I have noticed the same behavior.