Configuration Guide for Kerberos Client Products on HP-UX

Troubleshooting Kerberos Related Products
Troubleshooting Using the pamkrbval Tool
Chapter 4100
Troubleshooting Using the pamkrbval Tool
This section provides tips for troubleshooting with the pamkrbval tool.
When you use the pamkrbval tool for troubleshooting, you can get error
messages when validating the keytab file.
NOTE Use the pamkrbval command with the -c option to troubleshoot
CIFS-related issues.
Table 4-6 lists various errors that can occur and provides methods to
troubleshoot the errors.
Table 4-6 Error Messages that Appear During keytab Validation
Error/Warning Messages Reason for Message Troubleshooting
[WARNING] :
host/example.com@EXAMPLE.C
OM found on KDC but not
found in keytab file
[FAIL] : The keytab
validation Failed
The keytab validation
has failed because the
key table entry is not
found in the client’s
keytab file. There is a
host principal present at
the KDC.
Extract the keytab entry for
the host principal on your
system.
[WARNING] : Client not
found in Kerberos database
[WARNING] : The keytab
entry for the host service
principal
host/example.com@EXAMPLE.C
OM is invalid
[FAIL] : The keytab
validation Failed
The keytab validation
has failed because there
is no keytab entry in the
client’s keytab file and
KDC.
You must create the keytab
entry on the Kerberos server
and extract this keytab entry
on your system.