Configuring custom Kerberos principal for Hue

The Kerberos principal for Hue is configured by default to use the same service principal as the default process user. However, you can change the default setting by providing a custom principal in Cloudera Manager.

  1. Log in to Cloudera Manager as an Administrator.
  2. Go to Clusters > Hue service > Configuration and search for "Kerberos".
  3. Enter the custom Kerberos principal in the Kerberos Principal field.
    This Kerberos principal short name is used by all roles associated with this service.
    If you have secured your cluster using Knox, and if Knox uses custom Kerberos principal, then you must set the following configuration in the Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini field:
    [desktop]
    [[knox]]
    knox_principal=[***KERBEROS-PRINCIPAL-SHORT-NAME***]
    # example: knox_principal=knoxfoo0
  4. Click Save Changes and restart the Hue service.