issue about let a common user run application on YARN (with kerberose)

[ch huang]

hi,maillist:

       i use kerberos to do auth for my hadoop cluster, i have a 3-node
cluster(HDFS

& YARN)

z1.example.com (NN,RM)
z2.example.com (NM,DN)
z3.example.com (NM,DN,proxyserver,historyserver)

i create principal for NN&DN
hdfs/z1.example....@example.com
hdfs/z2.example....@example.com
hdfs/z3.example....@example.com

and for RM&NM

yarn/z1.example....@example.com
yarn/z2.example....@example.com
yarn/z3.example....@example.com

for mapreduce history server

mapred/z1.example....@example.com
mapred/z2.example....@example.com
mapred/z3.example....@example.com

for http principals in SPNEGO (instead of kerberos SSL for HTTP
transactions)

HTTP/z1.example....@example.com
HTTP/z2.example....@example.com
HTTP/z3.example....@example.com

and i can start cluster (HDFS & YARN) successfully

but i do not know how to let a common user to run application on yarn ,(i
am not know kerberos),any one can help?