I'm having this error when I try to start HDFS after enabling Kerberos:
java.io.IOException: Login failure for email@example.com from keytab hdfs.keytab: javax.security.auth.login.LoginException: No supported encryption types listed in default_tkt_enctypes
The encriptation type that i'm using is aes256-cts-hmac-sha1-99, as show the /etc/krb5.conf file:
default_tgs_enctypes = aes256-cts-hmac-sha1-96 default_tkt_enctypes = aes256-cts-hmac-sha1-96 permitted_enctypes = aes256-cts-hmac-sha1-96
Other thing is that the node that contains the KDC started correctly but the rest of them showed the error.
could you share the steps fo jce policy file
i have install in /usr/java/jdk1.8.0_171/jre/bin/security/US_export_policy.jar