Strict PTR-based Canonicalization vs. Fixed Principal Mapping for Kerberos Identity
In Hadoop clusters utilizing Kerberos security, the framework typically canonicalizes hostnames to build service principals (e.g., nn/host.example.com@REALM ). This process relies heavily on the consistency between forward (A) and reverse (PTR) DNS records to ensure the resolved canonical hostname matches the identity stored in the service keytab. In environ
hadoop