I am facing the same error, however our AD supports aes encryption type.   klist -kte zookeeper.keytab Keytab name: FILE:zookeeper.keytab KVNO Timestamp Principal ---- ------------------- ------------------------------------------------------ 1 06/09/2023 13:03:47 zookeeper/hostname@REALM (aes256-cts-hmac-sha1-96)     klist -Aef Ticket cache: FILE:/tmp/krb5cc_0 Default principal: zookeeper/host@REALM Valid starting Expires Service principal 06/09/2023 15:52:48 06/10/2023 01:52:48 krbtgt/REALM@REALM renew until 06/16/2023 15:52:48, Flags: FRIA Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96 ... View more