Hello! ran into the same problem, but in my case the kadmin/<FQDN kadmin server>@<REALM> existed and if i run kinit -S kadmin/@<REALM> admin/admin@<REALM> then he will authorize # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: admin/admin@<REALM> Valid starting       Expires              Service principal 08/07/2019 11:30:25  08/07/2019 14:30:25  kadmin/cluster@<REALM> ... View more