Configuration Guide for Kerberos Client Products on HP-UX

Troubleshooting Kerberos Related Products
Troubleshooting Using the pamkrbval Tool
Chapter 4 101
[WARNING] : Key incorrect
[WARNING] : The keytab
entry for the host service
principal
host/example.com@EXAMPLE.C
OM is invalid
[FAIL] : The keytab
validation Failed
There is a key mismatch
between the client and
the server.
Get the new keytab entry with
the correct key from the
Kerberos server.
/pamkrbval: Cannot contact
any KDC for requested
realm while getting TGT
[FAIL]: The keytab
validation failed
The KDC is not
accessible.
Check that the KDC daemons
are running.
[LOG] : The keytab entry
for
host/cherry.example.com is
not found in keytab file
/etc/krb5.keytab
[FAIL]: The keytab
validation failed
The keytab entry for the
host service principal is
not available.
• You must create the
keytab entry on the
Kerberos server and
extract this keytab entry
on your system.
• Regenerate the keytab file
in the CIFS environment
and check that the service
key for host/fqdn is
present in the file.
Execute the following
command to regenerate
the keytab file:
net ads keytab create –U
administrator
Table 4-6 Error Messages that Appear During keytab Validation
Error/Warning Messages Reason for Message Troubleshooting