Troubleshooting

Administrative Error Messages

key during authentication. If the principal does not have a 3DES key, the tools attempt to negotiate a supported key type. If the tools cannot negotiate a supported key type, the error message Service key not available while getting initial ticket is returned.

Action

If the user is using the command-line administrator, verify that the user does not enter an inappropriate key type during logon with the -eswitch. Because both the HP Kerberos Administrator and command-line administrator negotiate the best key type, it is not necessary to use the -eswitch to specify a key.

To change the key type assigned to the principal, edit the principal settings in the HP Kerberos Administrator>Password tab.You cannot change the key type of the principal using the command-line administrator.

Chapter 11

307