hi, @JobBranwl not sure how free IPA works, but it looks like whichever user you are using to generate this cart does not match the certificate CommanName i.e., CN. You might need to check on that part.
... View more
@JobBranwl This is Kerberos issue now and moreover with the usage of keyring for ticket cache which is not supported. You can refer to the below post to see if that helps. https://community.cloudera.com/t5/Support-Questions/Unable-to-access-Hadoop-CLI-after-enabling-Kerberos/m-p/305291
... View more
