Try below. Some times the ambari cluster environment variable security_enabled might still hold the value true and hence all services expect keytabs .   To validate the value of the environment variable  /var/lib/ambari-server/resources/scripts/configs.py -a get -l <ambari-server host> -t 8080 -n <cluster-name> -u <admin-user> -p <admin-password> -c cluster-env | grep security "security_enabled": "true", "smokeuser_keytab": "/etc/security/keytabs/smokeuser.headless.keytab"   /var/lib/ambari-server/resources/scripts/configs.py -a set -k security_enabled -v false -l <ambari-server host> -t 8080 -n <cluster name> -u <admin user> -p <admin password> -c cluster-env   Try setting that variable to false ... View more

This resolved my problem:    "As per the source code it pulls group's cn based on these values. Also comment out below if there is no group inside groups."   Instead of putting full DN name, simply put cn name. Thanks. This should be the accepted answer for zeppelin 0.8.    Zeppelin version: 0.8; HDP version: HDP 3.1.4   ... View more