Troubleshooting Kerberos Related Products

Troubleshooting Using the pamkrbval Tool

Troubleshooting Using the pamkrbval Tool

This section provides tips for troubleshooting with the pamkrbval tool. When you use the pamkrbval tool for troubleshooting, you can get error messages when validating the keytab file.

NOTE

Use the pamkrbval command with the -coption to troubleshoot

 

CIFS-related issues.

 

 

Table 4-6 lists various errors that can occur and provides methods to

 

 

troubleshoot the errors.

 

Table 4-6

Error Messages that Appear During keytab Validation

 

 

 

Error/Warning Messages

Reason for Message

Troubleshooting

 

 

 

 

[WARNING] :

 

The keytab validation

Extract the keytab entry for

host/example.com@EXAMPLE.C

has failed because the

the host principal on your

OM found on KDC but not

key table entry is not

system.

found in keytab file

found in the client’s

 

[FAIL] : The keytab

keytab file. There is a

 

validation Failed

host principal present at

 

 

 

the KDC.

 

 

 

 

[WARNING] : Client not

The keytab validation

You must create the keytab

found in Kerberos database

has failed because there

entry on the Kerberos server

[WARNING] : The keytab

is no keytab entry in the

and extract this keytab entry

client’s keytab file and

on your system.

entry for the host service

principal

 

KDC.

 

host/example.com@EXAMPLE.C

 

 

OM is invalid

 

 

 

[FAIL] : The keytab

 

 

validation Failed

 

 

 

 

 

 

100

Chapter 4