Do you specify spark.yarn.keytab somewhere ? James Srinivasan <james.sriniva...@gmail.com> 于2019年10月15日周二 上午4:01写道：
> I'm testing Zeppelin 0.8.2, using AD for user authentication and Spark > with user impersonation. > > If I log into my zeppelin host as the zeppelin (domain) user, check I > have a Kerberos ticket using klist, start zeppelin and then run some > Spark code (yarn-cluster), everything is fine - the Spark job is shown > in the YARN UI running as the AD user that I log into Zeppelin with. > > However, if I stop zeppelin, run kdestroy, check I have no ticket > using klist, then restart zeppelin and run Spark code, it still seems > to work fine. In fact, checking (using klist) indicates a Kerberos > ticket is acquired when just before running the Spark code. My > question is how does this work, and where is the keytab (I presume) > specified? > > Many thanks, > > James > -- Best Regards Jeff Zhang
