[15866] in Kerberos_V5_Development
Re: KRB5_KT_KVNONOTFOUND (-1765328154L) error
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Mon May 31 14:22:09 2010
Mime-Version: 1.0 (Apple Message framework v1078)
From: Ken Raeburn <raeburn@mit.edu>
In-Reply-To: <358342.96307.qm@web50107.mail.re2.yahoo.com>
Date: Mon, 31 May 2010 14:22:04 -0400
Message-Id: <B5C9AF76-608C-4B96-A479-B2D98A17D0F6@mit.edu>
To: vir vir <vitrou2004@yahoo.com>
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On May 31, 2010, at 14:01, vir vir wrote:
> Hi,
>
> I am creating a keytab file and adding a new entry using ktutil addent
>
> on linux service machine everything works fine on HP machine after I am adding it and running gss_accept_sec_context() I got KRB5_KT_KVNONOTFOUND. What could be the problem and how I can trace it?
A couple things you could look at are "klist -k" on the server to show the keytab contents, and "kvno" on the client to show the credentials. Based on that message, my guess would be that you're adding the new entry with the wrong key version number; if kvno indicates the key version number stored on the KDC is different from that in the keytab file, you should fix the keytab file. Using kadmin's "ktadd" is probably a safer way of getting it right, anyways.
Ken
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
