Be sure you have Installed and Configured your KDC and have prepared the JCE on each host in the cluster.

Log in to Ambari Web and Browse to Admin > Kerberos.

Click “Enable Kerberos” to launch the wizard.

Select the Manage Kerberos principals and keytabs manually option and confirm you have met the prerequisites.

Provide information about the KDC and admin account.

Customize the Kerberos identities used by Hadoop and proceed to kerberize the cluster.

Important

On the Configure Identities step, be sure to review the principal names, particularly the Ambari Principals on the General tab. These principal names, by default, append the name of the cluster to each of the Ambari principals. You can leave this as default or adjust these by removing the "-${cluster-name}" from principal name string. For example, if your cluster is named HDP and your realm is EXAMPLE.COM, the hdfs principal will be created as hdfs-HDP@EXAMPLE.COM.

Confirm your configuration. Since you have chosen the Manual Kerberos Setup option, obtain the CSV file for the list of principals and keytabs required for the cluster to work with Kerberos. Do not proceed until you have manually created and distributed the principals and keytabs to the cluster hosts.

Click Next to continue.

Ambari updates the cluster configurations, then starts and tests the Services in the cluster.

Exit the wizard when complete.

Finish by setting up Ambari Server for Kerberos.