Is hadoop.registry.secure set to true in yarn-site? If yes, then the following properties should be set as well: hadoop.registry.client.auth=kerberos hadoop.registry.jaas.context=Client But this may not work because of this issue: https://issues.apache.org/jira/browse/YARN-6104 This will be fixed in HDP2.6. ... View more