must yarn configure containor executor in a kerberized cluster?

[#1]

must yarn configure containor executor in a kerberized cluster?

If i configure yarn containor executor , when I use  MR , I should  create linux OS user on each nodemanager , why ?

And can i integrate kerberos without yarn containor executor ? Why?

[#2 · Accepted solution]

The user need to have access to the server where the application are running, to create the containers and use cgroup resources.

So, you can create the user in each nodemanager or use a solution like SSSD, LSASS, etc, to sync your users from AD or LDAP servers