cdh6.x 配置kerberos，报错 init: No key table entry found for USERNAME-REDACTED while getting initial cred

kerberos 配置完全正确，cdh启用kerberos报错：

/opt/cloudera/cm/bin/import_credentials.sh failed with exit code 1 and output of <<
+ export PATH=/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
+ PATH=/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
+ KEYTAB_OUT=/tmp/cmf4165950406306819665.keytab
+ USER=USERNAME-REDACTED
+ passwd=BUNDLE-REDACTED KVNO=1
+ SLEEP=0
+ RHEL_FILE=/etc/redhat-release
+ '[' -f /etc/redhat-release ']'
+ set +e
+ grep Tikanga /etc/redhat-release
+ '[' 1 -eq 0 ']'
+ '[' 0 -eq 0 ']'
+ grep 'CentOS release 5' /etc/redhat-release
+ '[' 1 -eq 0 ']'
+ '[' 0 -eq 0 ']'
+ grep 'Scientific Linux release 5' /etc/redhat-release
+ '[' 1 -eq 0 ']'
+ set -e
+ '[' -z /etc/krb5.conf ']'
+ echo 'Using custom config path '\''/etc/krb5.conf'\'', contents below:'
+ cat /etc/krb5.conf
+ IFS=' '
+ read -a ENC_ARR
+ for ENC in '"${ENC_ARR[@]}"'
+ echo 'addent -password -p USERNAME-REDACTED -k 1 -e des-cbc-crc'
+ ktutil
+ '[' 0 -eq 1 ']'
+ echo PASSWORD-REDACTED
+ echo 'wkt /tmp/cmf4165950406306819665.keytab'
+ chmod 600 /tmp/cmf4165950406306819665.keytab
+ kinit -k -t /tmp/cmf4165950406306819665.keytab USERNAME-REDACTED
kinit: No key table entry found for USERNAME-REDACTED while getting initial credentials

解决方法

更换加密类型为 aes256-cts搞定（我的版本chd6.2.0），和cdh中服务配置的支持加密类型有关，不行的可以多试几个加密类型或者找找对应配置的加密类型。