Hi Azim,   If you are not using Cloudera Manager to manage the krb5.conf then yes, you will need to manually update the krb5.conf on each host to include the secondary kdc and admin_server under the "[default realms]" section, as my colleagues denloe and bgooley have mentioned. ... View more

Hi Azim,   If you use Cloudera Manager then you only need to follow the steps I provided. In my example replace all instances of the variable $secondary_host with the appropriate hostname. Please remember that you will need to redeploy the Kerberos configurations after saving the changes in order for them to take effect.   If you encounter any difficulties with this process please let us know. ... View more

Hi Azim,   Are you using Cloudera Manager to manage the krb5.conf for the hosts in your cluster? If so, you can add a secondary KDC host with the following steps:   Step 1.) Within Cloudera Manager, under the Administration > Security > Configuration page, add the following to the "Advanced Configuration Snippet (Safety Valve) for the Default Realm in krb.conf":   kdc = $secondary_host admin_server = $secondary_host   Step 2.) Click "Save Changes" at the top of the page.   Step 3.) Execute a STOP (not restart) of the cluster services.   Step 4.) From the Cloudera Manager dashboard under the Actions dropdown, select "Deploy Kerberos Configuration".   Step 5.) Restart cluster services.   If you are not using Cloudera Manager to manage the krb5.conf for your hosts, you will need to manually update the krb5.conf and add the "kdc" and "admin_server" for the secondary KDC under the "Default Realms" section.   If you have any questions about this process or continue to encounter difficulties, please let us know.   Thanks,   Katelynn ... View more