Kerberos, no supported encryption types error

[#1]

Hello,

I'm having this error when I try to start HDFS after enabling Kerberos:

java.io.IOException: Login failure for hdfs/[email protected] from keytab hdfs.keytab: javax.security.auth.login.LoginException: No supported encryption types listed in default_tkt_enctypes

The encriptation type that i'm using is aes256-cts-hmac-sha1-99, as show the /etc/krb5.conf file:

default_tgs_enctypes = aes256-cts-hmac-sha1-96
default_tkt_enctypes = aes256-cts-hmac-sha1-96
permitted_enctypes = aes256-cts-hmac-sha1-96

Other thing is that the node that contains the KDC started correctly but the rest of them showed the error.

Thanks

Joaquín

[#2 · Accepted solution]

Solved. I had install the JCE Policy file.

[#3]

could you share the steps fo jce policy file

i have install in /usr/java/jdk1.8.0_171/jre/bin/security/US_export_policy.jar

/usr/java/jdk1.8.0_171/jre/bin/security/local_policy.jar