No, and in any case I don't think that works when proxying users? On Tue, 15 Oct 2019, 02:25 Jeff Zhang, <zjf...@gmail.com> wrote:
> Do you specify spark.yarn.keytab somewhere ? > > James Srinivasan <james.sriniva...@gmail.com> 于2019年10月15日周二 上午4:01写道： > >> I'm testing Zeppelin 0.8.2, using AD for user authentication and Spark >> with user impersonation. >> >> If I log into my zeppelin host as the zeppelin (domain) user, check I >> have a Kerberos ticket using klist, start zeppelin and then run some >> Spark code (yarn-cluster), everything is fine - the Spark job is shown >> in the YARN UI running as the AD user that I log into Zeppelin with. >> >> However, if I stop zeppelin, run kdestroy, check I have no ticket >> using klist, then restart zeppelin and run Spark code, it still seems >> to work fine. In fact, checking (using klist) indicates a Kerberos >> ticket is acquired when just before running the Spark code. My >> question is how does this work, and where is the keytab (I presume) >> specified? >> >> Many thanks, >> >> James >> > > > -- > Best Regards > > Jeff Zhang >
