This is true - `kerberosKeytabController.getFilteredKeytabs` finds both service and user principals - only if the given service has any components requiring the user principal on that host. I can reproduce this issue with 2.7.1.0-163 (see description above)
This was not the case in the cluster where QE found the issue: they created the cluster with BP - topology validation was switched off - with a host group where `Druid Historical` was present but no `HDFS Client` [ Full content available at: https://github.com/apache/ambari/pull/2359 ] This message was relayed via gitbox.apache.org for [email protected]
