In a kerberized environment, I am creating a session on Livy with a kerberos ticket of User X and giving proxyUser UserY. curl -v --negotiate -u : -X POST -H "Content-Type: application/json" -d '{"kind":"spark","proxyUser":"UserY"}' https://server-url:8998/sessions -k   The response I get is that {msg":"User 'UserX' not allowed to impersonate ''UserY"}   when I initiate a ticket with UserY and curl -v --negotiate -u : -X POST -H "Content-Type: application/json" -d '{"kind":"spark","proxyUser":"UserY"}' https://server-url:8998/sessions -k   Response I get: {"id":145,"name":null,"appId":null,"owner":"UserY","state":"starting","kind":"spark","appInfo":{"driverLogUrl":null,"sparkUiUrl":null},"log":["stdout: ","\nstderr: ","\nYARN Diagnostics:.....}   ... View more