After configuring the client/gateway node, run kinit (with the principal's keytab) before issuing Storm commands.