I'm testing Zeppelin 0.8.2, using AD for user authentication and Spark with user impersonation.
If I log into my zeppelin host as the zeppelin (domain) user, check I have a Kerberos ticket using klist, start zeppelin and then run some Spark code (yarn-cluster), everything is fine - the Spark job is shown in the YARN UI running as the AD user that I log into Zeppelin with. However, if I stop zeppelin, run kdestroy, check I have no ticket using klist, then restart zeppelin and run Spark code, it still seems to work fine. In fact, checking (using klist) indicates a Kerberos ticket is acquired when just before running the Spark code. My question is how does this work, and where is the keytab (I presume) specified? Many thanks, James
