Configuring custom Kerberos principal for Hue
The Kerberos principal for Hue is configured by default to use the same service principal as the default process user. However, you can change the default setting by providing a custom principal in Cloudera Manager.
Currently the Service Monitor role relies on using the same principal name as the Hue service to carry out some health checks on clusters: When changing the Hue principal, you should also update the Service Monitor configuration to use the same principal name. In addition, when Ozone is present, some Ranger policies need to be updated in the Ranger UI: S3_VOLUME_POLICY_FOR_OZONE_CANARY, S3_BUCKET_POLICY_FOR_OZONE_CANARY, S3_KEY_POLICY_FOR_OZONE_CANARY.
- Log in to Cloudera Manager as an Administrator.
- Go to and search for "Kerberos".
Enter the custom Kerberos principal in the Kerberos
This Kerberos principal short name is used by all roles associated with this service.
- Click Save Changes and restart the Hue service.