Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i

Troubleshooting
Troubleshooting Kerberos
Chapter 9268
Clock skew too great in
KDC reply while getting
initial credentials
This generally occurs
because the system’s clock
deviates too much from the
time on the authenticating
KDC. You are, generally,
allowed upto five minutes of
clock skew.
You will need to run
ntp, or a similar
service to keep your
system’s clock
synchronized with
the world’s atomic
clock. If you do not
know how to do this
then you should
contactyoursystem
administrator to
resolve this.
Requesting host
principal without
fully-qualified domain
name.
Server not found in
Kerberosdatabasewhile
getting the credentials
from kdc
Incorrect net address
while getting
credentials from kdc
The host uses /etc/hosts
to resolve name lookups
before dns. If the line for the
hostin /etc/hosts contains
unqualified domain name
before the fully-qualified
domain name.
This problem can also be
caused if the /etc/hosts
has a different IP address
for a host from what the
DNS server has.
/opt/krb5/krb.conf
not found
The krb.conf file has not
been created.
Copy the sample
file,
krb5.conf.sample,
from
/opt/krb5/exampl
e and edit
accordingly.
Can’t open/find
Configuration file while
initializing Kerberos
code
When you try to create the
database and krb.conf file
is not found in the
/opt/krb5 directory the
following error message
occurs.
Copy the sample
file,
krb.conf.sample,
from
/opt/krb5/exampl
e and edit
accordingly.
Table 9-2 Table of Errors Messages (Continued)