Ambari 2.1.1 ,after a period of time enable kerberos, it will appear occasionally questions like:
start a service in Ambari web but curl namenode error, since kinit password incorrect hdfs.headless.keytab;
or /etc/security/keytabs/rm.service.keytab Checksum failed . At last ,I found principal and keytab of each service password incorrect
checksum failed could be issued with certain java versions, is a manual kinit ok with your keytab?
you may also check if your keytabs are expiring