HP UX Kerberos Data Security Software manual

Troubleshooting

Administrative Error Messages

Command-Line-Administratorare set to use a 3DES key during authentication. If the principal does not have a 3DES key, the tools attempt to negotiate a supported key type. If that fails, this message is returned.

Action:

If the user is using Command- Line-Administrator, verify that the user is not entering an inappropriate key type during logon with the -e switch. Because both the Administrator and Command-Line-Administratornegotiate the best key type, it is not necessary to use the -e switch to specify a key.

If you must change the key type assigned to the principal:

•If you are using the Administrator, edit the principal settings in the

Password tab.

•You cannot change a user principal’s key type using the

Command-Line-Administrator.

Chapter 9 275