@lvazquez maybe you can directly execute a "kinit" to submit your user's credentials to your LDAP I manage to authenticate users from AD while the cluster is kerberorized through a FreeIPA Server. This is a command sample: %sh echo "password" | kinit foo@hortonworks.local hdfs dfs -ls / Found 12 items drwxrwxrwt - yarn hadoop 0 2019-10-02 13:53 /app-logs drwxr-xr-x - hdfs hdfs 0 2019-10-01 15:27 /apps drwxr-xr-x - yarn hadoop 0 2019-10-01 14:06 /ats drwxr-xr-x - hdfs hdfs 0 2019-10-01 14:08 /atsv2 drwxr-xr-x - hdfs hdfs 0 2019-10-01 14:06 /hdp drwx------ - livy hdfs 0 2019-10-02 11:35 /livy2-recovery drwxr-xr-x - mapred hdfs 0 2019-10-01 14:06 /mapred drwxrwxrwx - mapred hadoop 0 2019-10-01 14:08 /mr-history drwxrwxrwx - spark hadoop 0 2019-10-02 15:08 /spark2-history drwxrwxrwx - hdfs hdfs 0 2019-10-01 15:31 /tmp drwxr-xr-x - hdfs hdfs 0 2019-10-02 14:23 /user drwxr-xr-x - hdfs hdfs 0 2019-10-01 15:14 /warehouse I think this way is really ugly but at least, it is possible. Do not forget to change in your hdfs-site file the auth_to_local RULE:[1:$1@$0](.*@HORTONWORKS.LOCAL)s/@.*// RULE:[1:$1@$0](.*@IPA.HORTONWORKS.LOCAL)s/@.*// ... View more