I am using CDH 5.1 and I have enabled Kerberos with AD as KDC.  Kerberos was enabled successfully but HDFS service is not starting successfully.  The namenode logs includes the following for each datanode(see below).

5:57:29.969 PM WARN org.apache.hadoop.security.UserGroupInformation
PriviledgedActionException as:hdfs/server999priv.pldc.co.org@TEST.MSDS.CO.ORG (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7))] 

----

Secondly, the CDH5.1 documentation mentions that CM will automatically deploy the keytab files.  Where can I find the keytab files? 

Thank you for your help,

Ferds