https://community.cloudera.com/t5/Support-Questions/Peer-indicated-failure-GSS-initiate-failed/m-p/15652#M28823 Have you also added a KT_RENEWER role to Hue after enabling security, as the documentation dictates: <A target="_blank" href="http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.8.2/Configuring-Hadoop-Security-with-Cloudera-Manager/cmchs_enable_hue_sec_s11.html?">http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.8.2/Configuring-Hadoop-Security-with-Cloudera-Manager/cmchs_enable_hue_sec_s11.html?</A><BR /><BR />This would be necessary in order to allow Hue to talk to the JobTracker Thrift plugin with Kerberos+SASL, and will remove such exceptions. Sun, 20 Jul 2014 16:02:21 GMT Harsh J 2014-07-20T16:02:21Z