Submitting oozie jobs using keytab

问题:

I am using a keytab file to bypass kerberos to run a shell script through oozie. Shell script includes hbase shell commands so I nee to do a kinit before running hbase shell commands.This works fine for me.

So, in a case where I launch the job using a coordinator and have several shell scripts in the workflow using a keytab(service account) will there be a conflict in oozie ?Since I launch the job using oozie coordinator but have keytab files in workflow of a service account.

Thanks,

回答1:

The keytab files need to exist on all hadoop data nodes. Your shell scripts need them when running as a oozie job/map task to execute kinit for service accounts.

When deploying keytab files to data nodes of shared cluster, it's best to set file permission correctly so that other hadoop jobs will not have access to it.