Hi bertbert98,   Did you restart the Cloudera Manager services after implementing Security (Kerberos)? After implementing Kerberos, you need to restart the CM services (Activity Monitor, Service Monitor, Host Monitor, etc.). These services are separate from the cluster services, and can be found at the bottom of the main 'Services' page in CM.   Thanks,   Brian Burton Customer Operations Engineer ... View more

To add to this, Cloudera Manager uses the kadmin interface to generate the service principles. Windows AD does not support the kerberos kadmin interface from my understanding. You will be better off setting up a MIT based Kdc on a linux system and then configuring cross-realm trust with your AD server.   -roland ... View more

The best way would be by using the CM API.  Here is a handy blog entry describing how to use the API:   http://blog.cloudera.com/blog/2012/09/automating-your-cluster-with-cloudera-manager-api/   Also, we have v2 of the API out now, which is described here:   http://cloudera.github.io/cm_api/apidocs/v2/index.html ... View more