To set up basic Kerberos for views, see "Set Up Kerberos for Ambari Server" in the Ambari Security Guide.
After you have set up basic Kerberos for the Tez View, you must set the following configuration properties:
Set the following values for properties in the YARN configuration for Ambari-managed clusters or the
yarn-site.xml
for manually deployed clusters:Table 4.3. Kerberos Settings for Tez Views
Property
Value
yarn.timeline-service.http-authentication.proxyuser.${ambari principal name}.hosts
*
yarn.timeline-service.http-authentication.proxyuser.${ambari principal name}.users
*
yarn.timeline-service.http-authentication.proxyuser.${ambari principal name}.groups
*
For example, if the Kerberos principal used for the Ambari server is
ambari-service@EXAMPLE.COM
, replace${ambari principal name}
withambari-server
.Restart the Timeline Server so your configuration changes take effect.