diff --git a/hadoop-ozone/dist/pom.xml b/hadoop-ozone/dist/pom.xml
index 1da959002a3c..20c28b6368b4 100644
--- a/hadoop-ozone/dist/pom.xml
+++ b/hadoop-ozone/dist/pom.xml
@@ -31,7 +31,7 @@
     <docker.ozone.image>apache/ozone</docker.ozone.image>
     <docker.ozone.image.flavor>-rocky</docker.ozone.image.flavor> <!-- suffix appended to Ozone version to get Docker image version -->
     <docker.ozone-runner.version>20241108-jdk17-1</docker.ozone-runner.version>
-    <docker.ozone-testkr5b.image>ghcr.io/apache/ozone-testkrb5:20241112-1</docker.ozone-testkr5b.image>
+    <docker.ozone-testkr5b.image>ghcr.io/apache/ozone-testkrb5:20241129-1</docker.ozone-testkr5b.image>
     <maven.test.skip>true</maven.test.skip> <!-- no tests in this module so far -->
   </properties>
 
diff --git a/hadoop-ozone/dist/src/main/compose/common/init-kdc.sh b/hadoop-ozone/dist/src/main/compose/common/init-kdc.sh
index d5f7fd6d778e..97f532cfed75 100755
--- a/hadoop-ozone/dist/src/main/compose/common/init-kdc.sh
+++ b/hadoop-ozone/dist/src/main/compose/common/init-kdc.sh
@@ -20,7 +20,8 @@ set -eux -o pipefail
 # This script exports keytabs and starts KDC server.
 
 export_keytab() {
-   kadmin.local -q "ktadd -norandkey -k /etc/security/keytabs/$2.keytab $1@EXAMPLE.COM"
+  kadmin.local -q "addprinc -randkey $1@EXAMPLE.COM"
+  kadmin.local -q "ktadd -norandkey -k /etc/security/keytabs/$2.keytab $1@EXAMPLE.COM"
 }
 
 rm -f /etc/security/keytabs/*.keytab