One question regqrding the documentation of Kerberos, and more specifically "Step 5: Create the HDFS superuser". As the document states:
Cloudera recommends you use a different user account as the superuser, not the default hdfs account.
However, later on the steps described, the description mixes the notion of group and user and it is not quite clear what should be configured:
5. Locate the Superuser Group property and change the value to the appropriate group name for your environment. For example, <superuser>.
Assuming that group is what should be configured here (it's can't be user in that property), the rest of the configuration does not make sense, as it says that we need to "create a Kerberos principal called <superuser>". But Kerberos principals refers to users and services and not groups.
In any case, the above configuration does not work. Can someone clarify the documentation?