[28196] in Kerberos

home help back first fref pref prev next nref lref last post

Re: "Key table entry not found while verifying ticket for server"

daemon@ATHENA.MIT.EDU (Russ Allbery)
Sun Aug 5 03:55:53 2007

From: Russ Allbery <rra@stanford.edu>
To: Peter Losher <Peter_Losher@isc.org>
In-Reply-To: <46B575AD.2070904@isc.org> (Peter Losher's message of "Sun, 05
	Aug 2007 00:01:01 -0700")
Date: Sun, 05 Aug 2007 00:55:40 -0700
Message-ID: <877ioa1klf.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Peter Losher <Peter_Losher@isc.org> writes:

> Just added a new system tonight to our Kerberos realm, and was getting
> the following error when ksu'ing:

> "ksu: Key table entry not found while verifying ticket for server"

> Tried Googling for the error to no avail; what is the meaning of this
> error and how do I clear it?

Either the system doesn't have a keytab or the keytab that it has doesn't
contain a key for what ksu thinks it should use.  ksu tries to obtain a
service ticket for host/<fully-qualified-hostname>, so a common cause of
this is a mismatch between what DNS and/or /etc/hosts thinks the name of
the machine is and what's in the keytab.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post