ambari-server/conf/unix/krb5JAASLogin.conf

com.sun.security.jgss.krb5.initiate {
    com.sun.security.auth.module.Krb5LoginModule required
    renewTGT=false
    doNotPrompt=true
    useKeyTab=true
    keyTab="/etc/security/keytabs/ambari.keytab"
    principal="ambari@EXAMPLE.COM"
    storeKey=true
    useTicketCache=false;
};