Troubleshooting

Troubleshooting Kerberos

Run the service to your own node. To do this, your node name and internet address must be in the /etc/hosts file. If the server is successful, then the client and the server halves of the service operate correctly. This provides a starting point to determine where problems are occurring.

Troubleshooting Techniques

The following section describes various scenarios for potential problems. These debugs should help you troubleshoot and assist you in pinpointing a problem quickly.

Table 9-2

Table of Errors Messages

 

 

 

 

 

 

Error Message

Cause

Troubleshooting

 

 

 

Tips

 

 

 

 

 

Permission denied while

/opt/krb5/krb.conf set to

reset the

 

initializing krb5.

read only by root.

permissions to 644

 

 

 

 

 

Hostname cannot be

If the hostname is longer

Add the 8 character

 

canonicalized while

than 8 characters. A’ uname

name to the

 

selecting the best

-n’ returns the first 8

/etc/hosts file (just

 

principal

characters of the

tack it on to the end

 

 

name.

of the current IP

 

 

 

address/hostname

 

 

 

line).

 

 

 

 

 

ASN.1 failed call to

This message is usually

 

 

system time library -

displayed when a client is

 

 

while dispatching

requesting for a krbtgt with

 

 

 

a bad lifetime value

 

 

 

 

 

Chapter 9

267

Page 267
Image 267
HP UX Kerberos Data Security Software manual Troubleshooting Techniques