https://community.cloudera.com/t5/Support-Questions/Failing-to-connect-to-KDC-during-enable-kerberos-CA/m-p/237340#M199153 <P><A rel="user" href="https://community.cloudera.com/users/16235/nicojordaan.html" nodeid="16235">@Nico Jordaan</A> Take a look at the Ambari server log (/var/log/ambari-server/ambari-server.log) to see what the complete issue is. It could be related to the SSL cert or maybe the truststore you think it being used by Ambari is not really the truststore that Ambari is using. </P><P>One thing you can try is to disable certificate validation when connecting to the Active Directory while enabling Kerberos. This can be done by setting the following property in the ambari.properties file:</P><PRE>kerberos.operation.verify.kdc.trust = true</PRE><P>Then restart Ambari and try to re-enable Kerberos. </P> Wed, 05 Dec 2018 23:39:41 GMT rlevas 2018-12-05T23:39:41Z