Implementing Security Using Kerberos - Cloudera Administration - page 212

4. Change the group and user ownership of the cmf.keytab file using the follow-
ing command:
$ chown cloudera-scm:cloudera-scm /etc/
cloudera-scm-server/cmf.keytab
5. Change the permissions for the cmf.keytab file, so that cloudera-scm user
has the read and write permissions on the file. Use the following command to set
the permissions:
$ chmod 600 /etc/cloudera-scm-server/cmf.keytab
6. Create a file named cmf.prinicpal and add the following line to the file:
cloudera-scm/[e-mail]
7. Place the cmf.principal file under the /etc/cloudera-scm-server/
directory on the server where the Cloudera Manager Server is installed.
8. Change the group and user ownership of the cmf.principal file using the fol-
lowing command:
$ chown cloudera-scm:cloudera-scm /etc/
cloudera-scm-server/cmf.principal
9. Change the permissions for the cmf.principal file, so that only the
cloudera-scm user has the read and write permissions on the file. Use the fol-
lowing command to set the permissions:
$ chmod 600 /etc/cloudera-scm-server/cmf.principal