In krb5 1.2, there's a change to issue a renewable ticket only if the renewable life is greater than the normal ticket life time.
If that's not the case, kt_renewer will fail with:
Couldn't renew kerberos ticket in order to work around Kerberos 1.8.1 issue. Please check that the ticket for 'hue/bcub-1.ent.cloudera.com' is still renewable:
$ kinit -f -c /tmp/hue_krb5_ccache
If the 'renew until' date is the same as the 'valid starting' date, the ticket cannot be renewed. Please check your KDC configuration, and the ticket renewal policy (maxrenewlife) for the 'hue/bcub-1.ent.cloudera.com' and `krbtgt' principals.
So it's better for kt_renewer to always specify `-r' to kinit.