Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i

Troubleshooting
Troubleshooting Kerberos
Chapter 9 267
• Run the service to your own node. To do this, your node name and
internet address must be in the /etc/hosts file. If the server is
successful, then the client and the server halves of the service
operate correctly. This provides a starting point to determine where
problems are occurring.
Troubleshooting Techniques
The following section describes various scenarios for potential problems.
These debugs should help you troubleshoot and assist you in pinpointing
a problem quickly.
Table 9-2 Table of Errors Messages
Error Message Cause Troubleshooting
Tips
Permission denied while
initializing krb5.
/opt/krb5/krb.conf set to
read only by root.
reset the
permissions to 644
Hostname cannot be
canonicalized while
selecting the best
principal
If the hostname is longer
than 8 characters. A’ uname
-n’ returns the first 8
characters of the
name.
Add the 8 character
name to the
/etc/hosts file (just
tack it on to the end
of the current IP
address/hostname
line).
ASN.1 failed call to
system time library -
while dispatching
This message is usually
displayed when a client is
requesting for a krbtgt with
a bad lifetime value