Regenerate Kerberos keytabs from Ambari Web

As a cluster administrator, use Ambari Web > Cluster Admin > Kerberos to regenerate the key tabs required to maintain Kerberos security in your cluster.

Before regenerating key tabs in your cluster:

your cluster must be Kerberos-enabled
you must have KDC Admin credentials

In Ambari Web > Cluster Admin > Kerberos,click Regenerate Keytabs.
Confirm your selection to proceed.

Ambari connects to the Kerberos Key Distribution Center (KDC) and regenerates the key tabs for the service and Ambari principals in the cluster. Optionally, you can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

Restart all services.