Help Center > > User Guide> MRS Manager Operation Guide (Applicable to 2.x and Earlier Versions)> Permissions Management> Downloading a User Authentication File

Downloading a User Authentication File

Updated at: Aug 17, 2021 GMT+08:00


When a user develops big data applications and runs them in an MRS cluster that supports Kerberos authentication, the user needs to prepare a user authentication file for accessing the MRS cluster. The keytab file in the authentication file can be used for user authentication.

This section describes how to download a user authentication file and export the keytab file on MRS Manager.

  • Before downloading a Human-machine user authentication file, change the password for the user on MRS Manager to make the initial password set by the administrator invalid. Otherwise, the exported keytab file cannot be used. For details, see Changing the Password of an Operation User.
  • After a user password is changed, the exported keytab file becomes invalid, and you need to export a keytab file again.


  1. On MRS Manager, click System.
  2. In the Permission area, click Manage User.
  3. In the row of the user for whom you want to export the keytab file, choose More > Download authentication credential to download the authentication file. After the file is automatically generated, save it to a specified path and keep it properly.
  4. Open the authentication file with a decompression program.

    • user.keytab indicates a user keytab file used for user authentication.
    • krb5.conf indicates the configuration file of the authentication server. The application connects to the authentication server according to the configuration file information when authenticating users.

Did you find this page helpful?

Submit successfully!

Thank you for your feedback. Your feedback helps make our documentation better.

Failed to submit the feedback. Please try again later.

Which of the following issues have you encountered?

Please complete at least one feedback item.

Content most length 200 character

Content is empty.

OK Cancel