Overview

This document records how to apply Kerberos to YARN.

configurations

<!-- Site specific YARN configuration properties -->

<!-- ResourceManager Security Settings -->

<!-- NodeManager Security Settings -->

yarn.nodemanager.linux-container-executor.group=hadoop

banned.users=zookeeper

min.user.id=1000

allowed.system.users=hbase

By configuring the files as above, you can use YARN components securely.

However, ACL management becomes somewhat more difficult. To allow a new user to run MapReduce jobs, you need to create an account using `useradd` on all Hadoop Linux servers, and create a directory with the user's name under the HDFS user directory with the appropriate user permissions.

Quiz

Q1: What is the main topic covered in "Building a Secured (Kerberized) YARN Cluster"?

Learn how to apply Kerberos security to YARN.

Learn how to apply Kerberos security to YARN.

Consider the practical examples and patterns discussed throughout the post.