After a period of time enable kerberos from ambari kinit Password incorrect

[#1]

Ambari 2.1.1 ,after a period of time enable kerberos, it will appear occasionally questions like:

start a service in Ambari web but curl namenode error, since kinit password incorrect hdfs.headless.keytab;

or /etc/security/keytabs/rm.service.keytab Checksum failed . At last ,I found principal and keytab of each service password incorrect

[#2]

checksum failed could be issued with certain java versions, is a manual kinit ok with your keytab?

you may also check if your keytabs are expiring