When I update dynamic resource pool, CM automatically tries to update it. however it fails with following error

Completed only 4/5 steps. First failure: Process yarn-RESOURCEMANAGER-refresh (id=2101) on host host (id=3) exited with 255 and expected 0

on stderr:

User yarn/host@REALM (auth:KERBEROS) is not authorized for protocol interface 

also, on RM server role log, I find many of this log

2015-07-09 08:37:48,675 WARN org.apache.hadoop.security.authentication.server.AuthenticationFilter: AuthenticationToken ignored: AuthenticationToken expired

any thoughts?