Dear Jay, Oh!! Thank you very much. I think I should enter the limited user, so I just entered "auth=KERBEROS;proxyuser=ambari1" or "auth=KERBEROS;proxyuser=ambari1@example.com" into the field. It shows the error message: Invalid value: "ambari1@example.com" does not belong to the domain ^[A-Za-z_][A-Za-z0-9._-]*[$]?$ Then I wahched your answer again, and check config file "/etc/ambari-server/conf/krb5JAASLogin.conf" . After I changed the right principal name "auth=KERBEROS;proxyuser=ambari-server-c1" . It's work now !!!! Thank you very much !!! 🙂 ... View more