Our LDAP server requires a GSSAPI authenticated user to perform searches. HUE can use its key tab to do this. This has worked fine in CDH 4.5. However, after upgrading to CDH 5.0.3 this doesn't work anymore.
In the logs we find "SIMPLE_BIND not allowed" which is of course true. Additionally, the hue.ini of the server has a non populated [kerberos] section. This is in contrast to KT_RENEWER's hue.ini which does have the right variables in this section.