If you get an exception like this:
GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)
Check this two things first:
- Is the path to the keytab correct?
- Does the process have permission to read the keyab?
In my case it turned out that there was no keytab read permission in hdfs. Thanks Xavier Portebois.
If you still have any questions, feel free to ask me in the comments under this article, or write me on email@example.com.