@Geoffrey Shelton Okot So hashing out the the line in kdc.conf was not enough to make the errors go away, but when I changed the default config in Ambari to only 2 encryption types and hashed out the default ticket encryptions as well. the error went away. Thanks for all your help. ... View more

@Geoffrey Shelton Okot Find attached the 2 files ... View more

@Robert Levas @Geoffrey Shelton Okot when I used debug mode I get an additional line which might point to an encryption issue? please see attached pic ... View more

Hi @Robert Levas, I am able to do this manually. I got no errors. ... View more

@Geoffrey Shelton Okot Hi, my Javax policy is fine. see attached. Also I dont see photo 5 and 6 that you mentioned in your previous comment. ... View more

@Geoffrey Shelton Okot @Robert Levas Attached is the error in the ambari-server log when trying to regenerate keytab for hbase ... View more

Hi @Robert Levas the server is on the same domain. Kerberos is ok. the only issue is generation of keytabs when I add a new service. The principals are also created it just fails at keytab generation. ... View more

@Geoffrey Shelton Okot Hi have done everything accordingly, the domain is defined in the krb5.conf file. The ACL file is also ok. my process are running as expected. the only problem is Ambari is not able to generate keytabs. Like I said, Ambari creates the principals required in the kerberos db but is unable to generate keytabs.. I can run Kadmin and list the princs. ... View more

@Geoffrey Shelton Okot The screenshot shared previously was of Ambari UI when adding hbase as a service. Kerberos is MIT and was working fine when initially enabled. I realized there was a problem when adding a new service to the cluster. Ambari creates the principles needed in the kerberos db but is unable to create the keytabs. HDP version is 3.0.0.0-1634 Ambari Version 2.7.1.0 The procedure i used was the one in the guidelines of ambari using an exsisting MIT kerberos. It works fine until you try and add a new service or regenerate keytabs for an existing service. @Robert Levas There are no error messages in the logs that say anything. ... View more