Troubleshooting Kerberos Related Products

Troubleshooting PAM Kerberos

Table 4-1

Error Codes and Corrective Actions (Continued)

 

 

 

 

Error

PAM Error Code

Meaning

Reason/ Corrective

No.

Actions

 

 

 

 

 

 

4

PAM_AUTH_ERR

Authentication

The user's password may

 

 

failure

be wrong, or the host

 

 

 

machine identity is not

 

 

 

present, or the credential

 

 

 

cache may not be writable.

 

 

 

 

5

PAM_CRED_INSUFFICIENT

Cannot access

 

 

 

authentication

 

 

 

data: insufficient

 

 

 

credentials

 

 

 

 

 

6

PAM_AUTHINFO_UNAVAIL

Authentication

KDC Server is down or not

 

 

service not

reachable.

 

 

available

 

 

 

 

 

7

PAM_USER_UNKNOWN

User unknown to

Ensure that the user is

 

 

Kerberos service

present in Kerberos KDC.

 

 

 

 

8

PAM_CRED_UNAVAIL

Cannot retrieve

KRB5CCNAME is not set or

 

 

user credentials

the credential file does not

 

 

 

exist or the user is not

 

 

 

permitted to use the

 

 

 

credential cache.

 

 

 

 

9

PAM_CRED_EXPIRED

User credentials

Credential expired.

 

 

expired

Re-initialize the

 

 

 

credentials.

 

 

 

 

10

PAM_CRED_ERR

Failure setting

Check user's permissions

 

 

user credentials

to write to credential

 

 

 

cache.

 

 

 

 

11

PAM_ACCT_EXPIRED

User account has

Ensure that the user's

 

 

expired

account is valid.

 

 

 

 

12

PAM_AUTHTOK_ERR

Authentication

Check the password

 

 

token

entered.

 

 

manipulation

 

 

 

error.

 

 

 

 

 

92

Chapter 4