To the mapred-site.xml file on every host in your cluster, you must add the following
information:
Table 13.5. mapred-site.xml
| Property Name | Property Value | Description | Final |
|---|---|---|---|
| mapreduce.jobtracker.kerberos.principal | jt/_HOST@EXAMPLE.COM | Kerberos principal name for the JobTracker | |
| mapreduce.tasktracker.kerberos.principal | tt/_HOST@EXAMPLE.COM | Kerberos principal name for the TaskTracker.
_HOST is replaced by the host name of the
task tracker. | |
| mapreduce.jobtracker.keytab.file | /etc/security/keytabs/jt.service.keytab
| The keytab for the JobTracker principal | |
| mapreduce.tasktracker.keytab.file |
/etc/security/keytabs/tt.service.keytab
| The keytab for the Tasktracker principal | |
|
mapreduce.jobhistory.kerberos.principal Note: cluster variant | jt/_HOST@EXAMPLE.COM | Kerberos principal name for JobHistory. This must map to the same user as the JT user. | true |
mapreduce.jobhistory.keytab.file Note: cluster variant | /etc/security/keytabs/jt.service.keytab | The keytab for the JobHistory principal |
The XML for these entries:
<property>
<name>mapreduce.jobtracker.kerberos.principal</name>
<value>jt/_HOST@EXAMPLE.COM</value>
<description>Kerberos principal name for the JobTracker </description>
</property>
<property>
<name>mapreduce.tasktracker.kerberos.principal</name>
<value>tt/_HOST@EXAMPLE.COM</value>
<description>Kerberos principal name for the TaskTracker.
"_HOST" is replaced by the host name of the task tracker.
</description>
</property>
<property>
<name>mapreduce.jobtracker.keytab.file</name>
<value>/etc/security/keytabs/jt.service.keytab</value>
<description>
The keytab for the jobtracker principal.
</description>
</property>
<property>
<name>mapreduce.tasktracker.keytab.file</name>
<value>/etc/security/keytabs/tt.service.keytab</value>
<description>The filename of the keytab for the task
tracker</description>
</property>
<property>
<name>mapreduce.jobhistory.kerberos.principal</name>
<!--cluster variant -->
<value>jt/_HOST@EXAMPLE.COM</value>
<description> Kerberos principal name for JobHistory. This must map to
the same user as the JT user. )</description>
</property>
<property>
<name>mapreduce.jobhistory.keytab.file</name>
<!--cluster variant -->
<value>/etc/security/keytabs/jt.service.keytab</value>
<description>The keytab for the JobHistory principal
principal.</description>
</property> 
