IIRC, spark interpreter of zeppelin doesn't support impersonation in kerberized cluster. You can use livy interpreter instead which support this.
https://zeppelin.apache.org/docs/latest/interpreter/livy.html#impersonation <alexander.me...@t-systems.com>于2017年11月25日周六 上午5:56写道: > Hello users > > > > We have a cloudera cdh cluster where users are running their > notebooks/interpreters in impersonated mode (interpreter instantiated per > user in isolated process, User Impersonate checked). > > Most commonly used are the following interpreters: > > · Spark > > · Impala (jdbc interpreter group) > > · Phoenix (jdbc interpreter group) > > · HBase > > · Hive (jdbc interpreter group) > > > > We want to kerberize that cluster and I have tested user impersonation and > kerberos on a test cluster with zeppelin 0.7.3, user authentication in ldap > and authorization with kerberos… but I can’t get it to work. Not with a > single one of the interpretes mentioned above. > > Unfortunately I haven’t found any helpful documentation about how to > configure such a setup. Most how-to’s are covering kerberized cluster with > an interpreter specific keytab … is that really the only way? > > Or am I missing the obious? > > > > Thanks > > Alex > > > > > > >