The Problem was in a misconfigured Kerberos encryption type....   Tested the ktutil, first time it did not work, because I misspelled the encryption type. Worked well with the right encryption.   Tried to fix encryption type in Manager. Worked well! I deleted everything else and added  aes128-cts-hmac-sha1-96 (as in the example from https://web.mit.edu/kerberos/krb5-1.13/doc/admin/admin_commands/ktutil.html) This  config option should be defenitelly improved in cloudera manager! Aswell, as the error reporting! Hope this will be helpfull to somebody else too.   the default encryption type (if not configured in kerberos *.conf files) is: aes256-cts-hmac-sha1-96 thus it should also become default encryption type in cloudera manager. ... View more