Configure Storm for kerberos - kerberos

Question

I'm trying to configure a single node storm cluster to run over kerberos authentication.
Any time I try to access ui with this curl :
curl -i --negotiate -u:storm -b ~/cookiejar.txt -c ~/cookiejar.txt http://hadoop-machine1:8080/api/v1/cluster/summary
I have the following error:
HTTP ERROR: 403 GSSException: Failure unspecified at GSS-API level (Mechanism level: Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled).
Here is my storm configuration:
ui.header.buffer.bytes: 65536
storm.zookeeper.servers:
- "192.168.1.3"
storm.zookeeper.port: 2181
nimbus.host: "192.168.1.3"
java.library.path: "/usr/local/lib"
storm.local.dir: "/tmp/storm-data"
storm.messaging.transport: backtype.storm.messaging.netty.Context
supervisor.slots.ports:
- 6700
- 6701
- 6702
- 6703
- 6704
- 6705
- 6706
- 6707
ui.filter: "org.apache.hadoop.security.authentication.server.AuthenticationFilter"
ui.filter.params:
"type": "kerberos"
"kerberos.principal": "HTTP/hadoop-machine1#HADOOP-MACHINE1"
"kerberos.keytab": "/vagrant/keytabs/http.keytab"
"kerberos.name.rules": "DEFAULT"
storm.thrift.transport : "backtype.storm.security.auth.kerberos.KerberosSaslTransportPlugin"
storm.principal.tolocal: "backtype.storm.security.auth.KerberosPrincipalToLocal"
storm.zookeeper.superACL: "sasl:stormc"
java.security.auth.login.config: "/home/wouri/apache-storm-0.10.0/conf/jaas.conf"
nimbus.authorizer: "backtype.storm.security.auth.authorizer.SimpleACLAuthorizer"
nimbus.admins:
- "stormc"
nimbus.supervisor.users:
- "stormc"
nimbus.childopts: "-Xmx1024m -Djava.security.auth.login.config=/home/wouri/apache-storm-0.10.0/conf/jaas.conf"
ui.childopts: "-Xmx768m -Djava.security.auth.login.config=/home/wouri/apache-storm-0.10.0/conf/jaas.conf"
supervisor.childopts: "-Xmx256m -Djava.security.auth.login.config=/home/wouri/apache-storm-0.10.0/conf/jaas.conf"
Below is my kerberos config krb5.conf:
[libdefaults]
default_realm = HADOOP-MACHINE1
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
HADOOP-MACHINE1 = {
kdc = hadoop-machine1
admin_server = hadoop-machine1
master_key_type = aes256-cts-hmac-sha1-96
supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal
}
[domain_realm]
.hadoop-machine1 = HADOOP-MACHINE1
hadoop-machine1 = HADOOP-MACHINE1
And below is jaas.conf file:
StormServer {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/home/wouri/apache-storm-0.10.0/conf/storm.keytab"
storeKey=true
useTicketCache=false
principal="stormc/hadoop-machine1#HADOOP-MACHINE1";
};
StormClient {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/home/wouri/apache-storm-0.10.0/conf/storm.keytab"
storeKey=true
useTicketCache=false
serviceName="stormc"
principal="stormc/hadoop-machine1#HADOOP-MACHINE1";
};
Server {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/usr/local/zookeeper/conf/zookeeper.keytab"
storeKey=true
useTicketCache=false
serviceName="zookeeper"
principal="zookeeper/hadoop-machine1#HADOOP-MACHINE1";
};
Please, Is there a config flag that I am missing?