Hi @uri ben-ari, You can find the display-names and the property names in the xml configs like hdfs-site, hadoop-env.xml, core-site.xml, etc. https://github.com/apache/ambari/blob/cc412e66156d5a887a725015537dcb75b0caf986/ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/configuration/hdfs-site.xml https://github.com/apache/ambari/blob/cc412e66156d5a887a725015537dcb75b0caf986/ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/configuration/hadoop-env.xml for example: <property> <name>dfs.datanode.max.transfer.threads</name> <value>1024</value> <description> Specifies the maximum number of threads to use for transferring data in and out of the datanode. </description> <display-name>DataNode max data transfer threads</display-name> <value-attributes> <type>int</type> <minimum>0</minimum> <maximum>48000</maximum> </value-attributes> <on-ambari-upgrade add="true"/> </property> If you can't find something under the common-services then go the appropriate stack directory: ambari-server/src/main/resources/stacks/<STACK>/<STACK_VERSION>/services/<SERVICE_NAME>/configuration ... View more

Could you check what certificates the client truststore contains? keytool -list -v -keystore /path/to/hadoop-client-truststore It is worth checking, what is the ssl certificate used by the server. openssl s_client -showcerts -connect https://<kms_host>:9393 You can copy paste the pem content (from begincert to endcert) in a new file and check its content openssl x509 -noout -text -in saved.crt If you're using self signed certificates like in the docs, then this certificate (server) should be the same that is in the client trust store. ... View more

Is hadoop.registry.secure set to true in yarn-site? If yes, then the following properties should be set as well: hadoop.registry.client.auth=kerberos hadoop.registry.jaas.context=Client But this may not work because of this issue: https://issues.apache.org/jira/browse/YARN-6104 This will be fixed in HDP2.6. ... View more