Filter
Top Products
Troubleshooting
Troubleshooting Kerberos
Chapter 11296
Services Checklist
While troubleshooting ensure, that you have answered all the questions
in the troubleshooting checklist in the section “Characterizing a
Problem” on page 291. Ensure that your node name and the Internet
address exists in the /etc/hosts file, and run the service on your own
node. If the server is successful in authenticating, the client and the
server side of the service operates correctly. This provides a starting
point to determine where the problems are occurring.
Troubleshooting Techniques
Table 11-2 describes various troubleshooting scenarios and provides tips
for solving potential problems. These tips help you troubleshoot and
assist you in determining a problem quickly.
Table 11-2 Troubleshooting Scenarios
Scenario Cause Troubleshooting
Tips
Permission denied while
initializing krb5.
The
/opt/krb5/krb.conf
file is set to read-only by
root.
Reset the permissions
to 644.
Host name cannot be
made canonical while
selecting the best
principal.
The hostname is longer
than 8 characters. A
uname -n returns the
first 8 characters of the
name.
Add the 8 character
name to the
/etc/hosts file (just
tack it on to the end
of the current IP
address or host name
entry).
ASN.1 failed call to
system time library
while dispatching.
This message is usually
displayed when a client
is requesting a krbtgt
with a bad lifetime
value.