Implementing Security Using Kerberos - Cloudera Administration - page 210

Configuring Kerberos for Apache Hadoop
In this section, we will use Cloudera Manager to configure Kerberos for our cluster running
CDH5.
At the time of installation, CDH5 creates the following users:
• hdfs : This user runs the namenode, datanodes, and secondary namenode dae-
mons. The following screenshot shows the hdfs user as the owner of the namen-
ode service:
• mapred : This user runs the jobtracker and tasktracker daemons when using the
MRv1, and job history server daemon when using YARN (MRv2).
• yarn : This user runs the resource manager and node manager daemons.
• oozie : The user runs the Oozie server.
• hue : This user runs the Hue Server, Beeswax Server, Authentication Manager, and
Job Designer daemons.
In addition to the preceding users, the Cloudera Manager also creates a user called
cloudera-scm . We will need to set up authentication for all of these users in Kerberos.