Hadoop uses a rule-based system to create mappings between service principals and
their related UNIX usernames. The rules are specified in the
core-site.xml
configuration file as the value to the
optional key hadoop.security.auth_to_local
.
The default rule is simply named DEFAULT
. It translates all
principals in your default domain to their first component. For example,
myusername@APACHE.ORG
and
myusername/admin@APACHE.ORG
both become
myusername
, assuming your default domain is
APACHE.ORG.
Use the following instructions to configure the mappings between principals and UNIX usernames: