@Shelton , i ran into same issue as @obrobecker and tried you suggestion kinit with yarn-ats.hbase-client.headless.keytab, hbase.headless.keytab and their principles, still same issue not able to create hbase tables. it was working fine before kerberization. Is there anything else i can try?  ... View more

@obrobecker did you get this resolved? i ran into same issue in kerberized HDP 3.1, Non-kerberized env worked fine with zookeeper parent znode = /hbase-unsecure.  @Shelton I did tried all these keytabs and their principals,  yarn-ats.hbase-client.headless.keytab, yarn-ats.hbase-master.service.keytab, yarn-ats.hbase-regionserver.service.keytab, hbase.headless.keytab, hbase.service.keytab. Non working giving same error  failed on local exception: java.io.IOException: org.apache.hbase.thirdparty.io.netty.handler.codec.DecoderException: org.apache.hadoop.ipc.RemoteException(javax.security.sasl.SaslException): GSS initiate failed, details=row 'prod.timelineservice.entity' on table 'hbase:meta' at region=hbase:meta,,1.1588230740, hostname=myregionhost. Any suggestions to fix this? ... View more

@GangWar Thanks, this worked for me. ... View more

Any new updates for fix? We are facing same issue yarn resource manager failed to start after kerbero and ad integration. yarn resource manager was able to start before kerbero.  $Q0JU00-0VODD7BP1PAK@EXAMPLE.COM is not allowed to impersonate rm/hostname@EXAMPLE.COM ... View more

@jonathanhurley Sorry for digging into this old post. Is there any updates on Ambari 3.0 release?   Looks like AMBARI-12556 is in resolved in Ambari v2.6.0. Does it means V2.6.0+ already has this individual upgrade feature and no need to wait for v3.0?   https://issues.apache.org/jira/browse/AMBARI-12556    ... View more