In addition to the prerequisites provided here, ensure that you also meet the following prerequisites for secure deployments:
Ensure that the UNIX users (responsible for job submission) have the user ID greater than
1000
.Note We strongly discourage usage of Hadoop service users (hdfs, hbase, hcat, mapred) for submitting jobs. You must instead use separate UNIX users for job submissions.
Download the security policy JAR files:
wget http://download.oracle.com/otn-pub/java/jce_policy/6/jce_policy-6.zip
Note These JAR files must be present under
$JAVA_HOME/jre/lib/security/s
directoryEnsure that you replace the instances of
EXAMPLE.COM
(under therealm
property) ingsInstaller.propertiess
file with the actual value of therealm
defined in yourkrb5.conf
file.