When using kerberos with HDP it's not uncommon to find the odd strange encryption type floating around, possibly from a badly configured AD server. By adding the following to the Ambari -> Kerberos config section under supported encryption types its possible to isolate this issue for diagnostic.
While its probably not a wise idea to run with all these enabled in production having a full list of supported types can be useful for diagnostic or reference.