Cannot find key AP REP RC4 Kerberos

If you get an exception like this:

GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)

Check this two things first:

  • Is the path to the keytab correct?
  • Does the process have permission to read the keyab?

In my case it turned out that there was no keytab read permission in hdfs. Thanks Xavier Portebois.

If you still have any questions, feel free to ask me in the comments under this article or write me at

If I saved your day, you can support me 🤝

Leave a Reply

Your email address will not be published. Required fields are marked *