Failed to start Master services while launching kerberized cluster via Blueprint or API.

[#1]

Hi, I am trying to enable kerberos from ambari UI it works fine

but

when I am trying to add kerberos as a service through blueprint or api's, it fails to start namenode and master services. I am getting following error while NAMENODE FORMAT: java.io.IOException: Login failure for nn/host.server.com@SERVER.COM from keytab /etc/security/keytabs/nn.service.keytab: javax.security.javax.security.auth.login.LoginException: Unable to obtain password from user .

I could see principles have been created at kerberos server and keytab files are also been created in /etc/security/keytab

I have also tried kinit -kt /etc/security/keytab/nn.service.keytab nn/host.server.com@SERVER.COM

this gives an error :-

Keytab contains no suitable keys for host/host.server.com@SERVER.COM while getting initial credentials

[#2]

@Girish Mane

Can you check the two things

1. The permission on keytab

2. try doing a "klist" to see if it contains the correct principal in it ? The Encryption as well.

klist -kte /etc/security/keytab/nn.service.keytab

.

Whatever principal name you see in the output of the above command try doing the "kinit" with that.