Great spot! Indeed you are right, the KrbHostFQDN is not the host where kerberos runs on, but will be the impala host. This fixed my error. Many thanks for taking the time to read through the post and give the appropriate solution! PS: I believe then KrbHostFQDN will always be the same as the impala host we connect to (the value "impalahost" in jdbc:impala://impalahost), so one could ask why it is worth having a separate config option for this.     ... View more