property `hive.metastore.kerberos.principal` is essential when the principal of hms you are connecting is not the default value: hive-metastore/_HOST@your_realms。 otherwise, you will get error: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)