I have the same problem... Ambari Version: 2.2.2.0 HDP Version: 2.4.2.0-258 I can ping KDC from Ambari Server and telnet port 88/749 as well as running kadmin command without error: /usr/bin/kadmin -s KDC_SERVER:749 -p admin -w ****** -r EXAMPLE.COM -q "get_principal admin" I've also checked the src code but no luck: https://github.com/apache/ambari/blob/trunk/ambari-server/src/main/java/org/apache/ambari/server/KdcServerConnectionVerification.java After retarting Ambari Server in DEBUG mode, found the problem: Caused by: java.lang.IllegalArgumentException: Algorithm AES256 not enabled Still testing how to enable it... modify the krb.conf, but doesn't work. It looks like the JCE installation issue (confirm the JCE policy jars were in the right place...) ... View more