Failing only for few service accounts rest works fine, checked AD and account is not locked or expired.
File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 293, in _call raise ExecutionFailed(err_msg, code, out, err) resource_management.core.exceptions.ExecutionFailed: Execution of '/usr/bin/kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-xxx@xxx.LOCAL' returned 1. kinit: Clients credentials have been revoked while getting initial credentials
Usually this indicates that the Account might be locked from the Active Directory.
Please cross check with your AD team and you can test it from terminal by running kinit command.
$ kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-xxx@xxx.LOCAL
If output of kinit command give you same error Clients credentials have been revoked while getting initial credentials. It means this account is expired/locked/deleted.