[15867] in Kerberos_V5_Development
Re: KRB5_KT_KVNONOTFOUND (-1765328154L) error
daemon@ATHENA.MIT.EDU (vir vir)
Mon May 31 14:39:45 2010
Message-ID: <857926.74039.qm@web50106.mail.re2.yahoo.com>
Date: Mon, 31 May 2010 11:39:39 -0700 (PDT)
From: vir vir <vitrou2004@yahoo.com>
To: Ken Raeburn <raeburn@mit.edu>
In-Reply-To: <B5C9AF76-608C-4B96-A479-B2D98A17D0F6@mit.edu>
MIME-Version: 1.0
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: krbdev-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi Ken,
Thank you for this information. The only thing I am not sure about why there is a different between Linux and HP machines ?
Thanks,
Alex
--- On Mon, 5/31/10, Ken Raeburn <raeburn@MIT.EDU> wrote:
From: Ken Raeburn <raeburn@MIT.EDU>
Subject: Re: KRB5_KT_KVNONOTFOUND (-1765328154L) error
To: "vir vir" <vitrou2004@yahoo.com>
Cc: krbdev@mit.edu
Received: Monday, May 31, 2010, 11:22 AM
On May 31, 2010, at 14:01, vir vir wrote:
> Hi,
>
> I am creating a keytab file and adding a new entry using ktutil addent
>
> on linux service machine everything works fine on HP machine after I am adding it and running gss_accept_sec_context() I got KRB5_KT_KVNONOTFOUND. What could be the problem and how I can trace it?
A couple things you could look at are "klist -k" on the server to show the keytab contents, and "kvno" on the client to show the credentials. Based on that message, my guess would be that you're adding the new entry with the wrong key version number; if kvno indicates the key version number stored on the KDC is different from that in the keytab file, you should fix the keytab file. Using kadmin's "ktadd" is probably a safer way of getting it right, anyways.
Ken
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
