Distcp between secure clusters in different Kerberos realms

To use distcp between two secure clusters in different Kerberos realms, you must use a single Kerberos principal that can authenticate to both realms. In other words, a Kerberos realm trust relationship must exist between the source and destination realms. This can be a one-way trust (in either direction), a bi-directional trust, or even multiple one-way trusts where both the source and destination realms trust a third realm (such as an Active Directory domain).

Ensure that both the secure clusters run a supported version of JDK. For more information about the supported JDK versions, see Java Requirements.
If there is no trust relationship between the source and destination realms, you cannot use distcp to copy data between the clusters, but you can use Replication Manager. For details, see Enabling Replication Between Clusters with Kerberos Authentication.