Hello @zanteb ,   Thank you for posting your query.   While you are using with spark-submit you would require to pass the files (jass & keytab) with --files option on spark-submit just like [1]   https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/developing-spark-applications/content/running_spark_streaming_jobs_on_a_kerberos-enabled_cluster.html   While doing so, your JAAS and keytab file would be shipped to executors and Application master /Driver (incase of cluster mode)   If your external client is not spark and it is just a standalone java code (example) then you can just go ahead with passing "-Djava.security.auth.login.config=jaas.conf"" while executing the code and file can reside on the same client node ... View more