Typically, we see this type of stack trace when the keytab for the service principals do not match the principals in the KDC.   Also, occasionally, the enctypes for the KDC do not match up with encryption types in your krb5.conf on the client side, with something like arcfour-hmac missing, but this is less likely the cause.   https://web.mit.edu/kerberos/kfw-4.1/kfw-4.1/kfw-4.1-help/html/encryption_types.htm   Our first suggestion would be to:    Stop all services on the cluster Regenerating all of the existing principals beneath: Administration > Security > Kerberos Credentials > Select all > Regenerate Selected Start all services on the cluster   ... View more