Kerberos Setup for Tez View

Prerequisites

Set up basic Kerberos for views, on the Ambari Views server.

After you have set up basic Kerberos, Tez View requires that you set the following configuration properties:

Steps

On the timeline server host, set the following values for properties in the YARN configuration for Ambari-managed clusters or the yarn-site.xml for manually deployed clusters:

Table 2.7. Kerberos Settings for Tez View

Property	Value
`yarn.timeline-service.http-authentication.proxyuser.<ambari-principal-name>.hosts`	`*`
`yarn.timeline-service.http-authentication.proxyuser.<ambari-principal-name>.users`	`*`
`yarn.timeline-service.http-authentication.proxyuser.<ambari-principal-name>.groups`	`*`
`Timeline HTTP Auth`	`kerberos`
`RM HTTP Auth`	`kerberos`

	Note
	Tez View will not work in a kerberized cluster, if Timeline HTTP Auth and RM HTTP Auth properties are not set to kerberos.

For example, if the Kerberos principal used for the Ambari server is ambari-service@EXAMPLE.COM, replace ambari-service with <ambari-principal-name>.

Restart the Timeline Server so your configuration changes take effect.

More Information

Set Up Kerberos for Ambari Server

​Kerberos Setup for Tez View

Kerberos Setup for Tez View