Specifically Knox supports TAM now ISAM via pre-authenticated headers. You can find out more here: http://knox.apache.org/books/knox-0-6-0/user-guide.html#Preauthenticated+SSO+Provider ... View more

Hi! In the case both clusters will be configured to use a DellEMC ISILON. On Installation Guide have a config step to remove the "-${CLUSTER_NAME}". How to proceed in this case? Will be possible both cluster in the same AD Domain (realm)? From Installation Guide "Isilon-OneFS-With-Hadoop-and-Hortonworks-for-Kerberos-Installation-Guide" "Click the General tab and configure the Apache Ambari user principals as shown in the next table. Remove -${cluster-name} from the default value and change to a value as shown in the Required value column so that it matches the service account names (users) that you created during the initial configuration of your Isilon OneFS cluster for use with Ambari and Hortonworks." ... View more

Falcon will automatically add this property to oozie jobs in secure kerberized clusters. User does not have to add the property separately. When defining a cluster entity, please make sure to add the following cluster property. <property name="dfs.namenode.kerberos.principal" value="nn/$my.internal@EXAMPLE.COM"/> http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_installing_manually_book/content/configuring_for_secure_clusters_falcon.html ... View more