Turned out to be a silly mistake - this line had the clue - Login failure for nm/node28.my.com@HDP from keytab nm.service.keytab. The keytab's absolute path should be in the message. In ambari blueprint, node manager keytab configuration did not have the absolute path which is - /etc/security/keytabs/nm.service.keytab ... View more

This could probably be because when installing with ambari blueprint, zookeeper server_jvmflags does not have the following system property - SERVER_JVMFLAGS="-Djava.security.auth.login.config=/path/to/zookeeper_jaas.conf" Going to modify the blueprint and try again. ... View more