The current documentation for CM / CDH 5 covers being able to use direct to AD integration where Cloudera Manager maintains the Kerberos principals in AD. This does not require cross realm authentication. http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM5/latest/Configuring-Hadoop-Security-with-Cloudera-Manager/cm5chs_intro_kerb.html This is not provided in the 4.x release. What is it your are looking for? Manual management of principals in AD for cloudera manager? This is a very complicated and error prone approach to doing things. We do not document this approach as it generally causes more problems as change/add/delete of nodes from the topology becomes a point of human error causing potential outage. Todd ... View more

We offer Cluster Certifications as a service, if you are interested in looking at that: http://www.cloudera.com/content/cloudera/en/products-and-services/professional-services/certification.html ... View more