3. (Optional) Configure Storm to Work with a Secured Zookeeper Cluster

Create a jaas.conf file in the /etc/storm/conf with the following content on all hosts in the Storm cluster :

Client {
   com.sun.security.auth.module.Krb5LoginModule required
   useKeyTab=true
   keyTab="$keytab"
   storeKey=true
   useTicketCache=false
   serviceName="zookeeper"
   principal="$principal";
};

Add the following configuration properties to the storm.yaml file:

nimbus.childopts:"-Djava.security.auth.login.config=/path/to/jaas.conf"
ui.childopts:"-Djava.security.auth.login.config=/path/to/jaas.conf"
supervisor.childopts:"-Djava.security.auth.login.config=/path/to/jaas.conf"