Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i

Troubleshooting
Administrative Error Messages
Chapter 9 275
Command-Line-Administrator are set to use a 3DES key during
authentication. If the principal does not have a 3DES key, the tools
attempt to negotiate a supported key type. If that fails, this message is
returned.
Action:
If the user is using Command- Line-Administrator, verify that the user
is not entering aninappropriate key typeduring logon with the -e switch.
Because both the Administrator and Command-Line-Administrator
negotiate the best key type, it is not necessary to use the -e switch to
specify a key.
If you must change the key type assigned to the principal:
If you are using the Administrator, edit the principal settings inthe
Password tab.
You cannot change a user principal’s key type using the
Command-Line-Administrator.