Troubleshooting Kerberos Related Products
Troubleshooting the Kerberos Client Utilities
Troubleshooting the Kerberos Client Utilities
Kerberos utilities, kdestroy, kinit, klist, and kpasswd can return the following errors. Table
| Table | Kerberos Client Error Codes |
|
| ||
|
|
|
|
|
|
|
| Error |
| Error | Meaning | Reason/Corrective |
|
| No. |
| Action |
| ||
|
|
|
|
| ||
|
|
|
|
|
|
|
| 1 |
| kdestroy: No credentials | The credentials cache file | The credential file may |
|
|
|
| cache file found while | was not found. | have been deleted. |
|
|
|
| destroying cache. Ticket |
| Recreate the credentials |
|
|
|
| cache not destroyed! |
| (TGT) using kinit. |
|
|
|
|
|
|
|
|
| 2 |
| kinit: Key table entry | The local keytab file does | Add the principal key |
|
|
|
| not found while getting | not contain the key for | entry to the keytab file. |
|
|
|
| initial credentials. | the principal whose |
|
|
|
|
|
| credentials are being |
|
|
|
|
|
| requested. |
|
|
|
|
|
|
|
|
|
| 3 |
| kinit: Client not found | The principal whose | Verify that there is a |
|
|
|
| in Kerberos database | credentials are being | principal entry |
|
|
|
| while getting initial | requested does not exist | available for the client |
|
|
|
| credentials. | in the Kerberos database. | in the Kerberos |
|
|
|
|
|
| database. If there is no |
|
|
|
|
|
| entry, you must create |
|
|
|
|
|
| it. |
|
|
|
|
|
|
|
|
| 4 |
| klist: No credentials | No credentials cache file | This could be due to the |
|
|
|
| cache file found | was found. | deletion of credentials. |
|
|
|
|
|
| Recreate the credentials |
|
|
|
|
|
| using kinit or if the |
|
|
|
|
|
| credential file is |
|
|
|
|
|
| different from the one |
|
|
|
|
|
| indicated by klist; |
|
|
|
|
|
| then export the |
|
|
|
|
|
| KRB5CCNAME |
|
|
|
|
|
| environment variable to |
|
|
|
|
|
| specify the correct |
|
|
|
|
|
| filename. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
94 | Chapter 4 |