Here's what I used after guidance from @Robert Levas "security" : {
"type" : "KERBEROS",
"kerberos_descriptor": {
"properties": {
"realm" : "YOURREALMHERE",
"keytab_dir" : "/etc/security/keytabs"
},
"identities" : [
{
"principal" : {
"type" : "user",
"value" : "ambari-qa@${realm}"
},
"name" : "smokeuser"
}
],
"services" : [
{
"name" : "HDFS",
"components" : [
{
"name" : "NAMENODE",
"identities" : [
{
"principal" : {
"configuration" : "hadoop-env/hdfs_principal_name",
"type" : "user",
"local_username" : "hdfs",
"value" : "hdfs@${realm}"
},
"name" : "hdfs"
}
]
}
]
},
{
"name" : "MAPREDUCE2",
"components" : [
{
"name" : "HISTORYSERVER",
"identities" : [
{
"principal" : {
"configuration" : "mapred-site/mapreduce.jobhistory.principal",
"type" : "service",
"local_username" : "mapred",
"value" : "mapred/_HOST@${realm}"
},
"name" : "history_server_jhs"
}
]
}
]
},
{
"name" : "SPARK",
"identities" : [
{
"principal" : {
"configuration" : "spark-defaults/spark.history.kerberos.principal",
"type" : "user",
"local_username" : "spark",
"value" : "spark@${realm}"
},
"name" : "sparkuser"
}
]
},
{
"name" : "ACCUMULO",
"identities" : [
{
"principal" : {
"configuration" : "accumulo-env/accumulo_principal_name",
"type" : "user",
"local_username" : "accumulo",
"value" : "accumulo@${realm}"
},
"name" : "accumulo"
},
{
"principal" : {
"configuration" : "accumulo-site/trace.user",
"type" : "user",
"local_username" : "accumulo",
"value" : "accumulo@${realm}"
},
"name" : "accumulo_tracer"
}
]
},
{
"name" : "HBASE",
"identities" : [
{
"principal" : {
"configuration" : "hbase-env/hbase_principal_name",
"type" : "user",
"local_username" : "hbase",
"value" : "hbase@${realm}"
},
"name" : "hbase"
}
]
},
{
"name" : "YARN",
"components" : [
{
"name" : "NODEMANAGER",
"identities" : [
{
"principal" : {
"configuration" : "yarn-site/yarn.nodemanager.principal",
"type" : "service",
"local_username" : "yarn",
"value" : "yarn/_HOST@${realm}"
},
"name" : "nodemanager_nm"
}
]
},
{
"name" : "RESOURCEMANAGER",
"identities" : [
{
"principal" : {
"configuration" : "yarn-site/yarn.resourcemanager.principal",
"type" : "service",
"local_username" : "yarn",
"value" : "yarn/_HOST@${realm}"
},
"name" : "resource_manager_rm"
}
]
}
]
},
{
"name" : "STORM",
"identities" : [
{
"principal" : {
"configuration" : "storm-env/storm_principal_name",
"type" : "user",
"value" : "storm@${realm}"
},
"name" : "storm_components"
}
]
},
{
"name" : "FALCON",
"configurations" : [
{
"falcon-startup.properties" : {
"*.dfs.namenode.kerberos.principal" : "hdfs/_HOST@${realm}"
}
}
]
}
]
}
},
"configurations" : [
{
"kerberos-env": {
"properties_attributes" : { },
"properties" : {
"realm" : "YOURREALM",
"kdc_type" : "mit-kdc",
"kdc_host" : "my-real-kdc.emc.com",
"admin_server_host" : "my-real-ambari-server.emc.com"
}
}
},
{
"krb5-conf": {
"properties_attributes" : { },
"properties" : {
"domains" : "YOURREALM",
"manage_krb5_conf" : "true"
}
}
}
]
... View more
