Cloudera Manager passes configuration and those keytabs through the agent at startup of the CDH processes configured to run on that cluster server.   Those are correct keytabs to be distributed to those services.   The monitoring services re-use the hue keytab for their activity with cluster nodes.   For the HDFS keytab present that is for functionality within reports manager that requires access to hdfs information.   The principal names are described within the SCM management DB, as well as the merged keytabs for the roles as gathered from the credentials table.   Todd ... View more

The keytabs are pushed from a database to a runtime location at startup of services, what you are describing as a configuration is not really viable from what I understand.   You will see /var/run/cloudera-scm-agent/process/  but this is ephemeral, next restart will have another locaiton.   You could experiment with trying to provide the manual keytabs through safety valve to the necessary services. Todd ... View more