In the Fusioninsight HD system, Kerberros is only used for security authentication of component services.

The statement is incorrect because the role of Kerberos in the Huawei FusionInsight HD system is not limited to the authentication of component services. Kerberos is the core identity authentication mechanism for the entire cluster in security mode. Its primary functions include authenticating users who need to access cluster resources and services, as well as authenticating services for inter-component communication. By excluding user authentication, which is a fundamental purpose of Kerberos, the statement provides an incomplete and therefore inaccurate description of its function.

The option "True" is incorrect because it narrowly and inaccurately defines the scope of Kerberos. A secure FusionInsight HD cluster relies on Kerberos to verify the identity of any principal (be it a human user, an application, or a system service) attempting to access or interact with any other component. Limiting its role to "only" service authentication ignores its critical function in authenticating end-users and applications.

1. Huawei FusionInsight HD Product Documentation - Administrator Guide. In the "Security Management" chapter, under the section describing Kerberos authentication, it is explicitly stated that when security mode is enabled, all users and services must pass Kerberos authentication before they can access cluster services. This confirms that Kerberos authenticates both users and services. (Reference: FusionInsight HD V100R002C80 Administrator Guide, Section: "Security Management > Kerberos Authentication").

2. Huawei HCIA-Big Data V2.0 (H13-711) Official Training Material. The security module for this certification course explains that FusionInsight HD uses Kerberos to provide a unified, centralized authentication platform. It details the process where a client (representing a user) obtains a Ticket-Granting Ticket (TGT) from the Key Distribution Center (KDC) and then uses it to request service tickets to access specific services like HDFS or YARN. This process is central to user authentication. (Reference: HCIA-Big Data V2.0 Training Material, Chapter on "FusionInsight HD Security").

3. Kerberos: The Network Authentication Protocol (MIT Kerberos Documentation). The foundational design of the Kerberos protocol, which is implemented by FusionInsight HD, is to provide strong authentication for client/server applications. The documentation describes the primary interaction where a client (user) proves its identity to an Authentication Server to get a ticket for a specific service. This core principle is directly applicable to FusionInsight's usage. (Reference: MIT Kerberos Official Website, "How Kerberos Works" section, web.mit.edu/kerberos/overview.html).