Troubleshooting

 

 

 

Troubleshooting Kerberos

Table 11-3

Troubleshooting Scenarios for your LDAP-based Kerberos

 

server (Continued)

 

 

 

 

 

 

 

Scenario

Cause

Troubleshooting

 

 

 

Tips

 

 

 

 

 

LDAP

The Kerberos server

Verify that the values

 

authentication

was unable to

of the proxy_user and

 

failed

connect to the

proxy_user_password

 

 

Directory server with

are correct. Ensure

 

 

the information

that you change the

 

 

provided in the

value of

 

 

/opt/krb5/krb5_ld

proxy_user_password

 

 

ap.conf

when you change the

 

 

configuration file.

either the password of

 

 

 

the proxy user in the

 

 

 

Directory server or

 

 

 

change the master key.

 

 

 

 

 

LDAP initialization

 

Verify that the

 

failed

 

Directory server’s

 

 

 

hostname and port

 

 

 

number are valid

 

 

 

 

 

ldap_clientauth_

 

Verify that the

 

init failed

 

certificate present in

 

 

 

the certdbpath is

 

 

 

valid. Verify that the

 

 

 

Directory server has to

 

 

 

be properly configured

 

 

 

to use SSL.

 

 

 

 

 

ldap_init failed

 

Verify that the

 

 

 

certificate present in

 

 

 

the certdbpath is

 

 

 

valid. Verify that the

 

 

 

Directory server has to

 

 

 

be properly configured

 

 

 

to use SSL.

 

 

 

 

Chapter 11

301