if kerberos is enabled, then show in keytab your algorithms! For example , the FreeIpa support ONLY aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96
aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96
Generate keytab TRUE!!