[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: failed to find HTTP/bsdfloh.domain.tld@DOMAIN.TLD(kvno 9) in keytab /usr/local/etc/apache2/bsdflohkeytab
11 jun 2007 kl. 10.14 skrev Florian Erfurth:
> Michael B Allen wrote:
>> On Mon, 11 Jun 2007 15:29:06 +0200
>> Florian Erfurth <email@example.com> wrote:
>>> Miscellaneous failure (see text) (failed to
>>> find HTTP/bsdfloh.domain.tld@DOMAIN.TLD(kvno 9) in
>>> keytab /usr/local/etc/apache2/bsdflohkeytab)
>>> Vno Type Principal
>>> 10 des-cbc-md5 HTTP/bsdfloh.domain.tld@DOMAIN.TLD
>>> What's wrong? Maybe because kvno differs, huh?
>> Yes. Reset the password and regenerate the keytab to make sure the
>> is in sync with the KDC.
> If keytab isn't in sync with the KDC, then the following command
> work (I think).
The problem is that your client have a non updated krb5 cred cache
with a ticket the old kvno in it.
When you update the keytab, keep the older kvnos around for your
maxium ticket lifetime.
So, go to the client and have then run kinit again.