Incase anyone ever comes across this thread.  We found that the problem was that the user had an upper case letter in his windows AD account.

To fix this issue we set:

HDFS Config: Map Kerberos Principals to Short Names
RULE:[1:$1]/L
DEFAULT

Impala Config: load_auth_to_local_rules
TRUE