take a look to this doc:
It is for HDP 1.x, but I believe should work same way on HDP 2.x
All the properties should be installed.
I set up kerberos number of time, using mentioned document, it works fine for me.
You may also try to use script setupKerberos.sh ( it coming together with gsINstaller package).
Always works fine.