Re: failed to find HTTP/bsdfloh.domain.tld@DOMAIN.TLD(kvno 9) in keytab /usr/local/etc/apache2/bsdflohkeytab

[Love Hörnquist Åstrand <lha@kth.se>]

11 jun 2007 kl. 10.14 skrev Florian Erfurth:

> Michael B Allen wrote:
>
>> On Mon, 11 Jun 2007 15:29:06 +0200
>> Florian Erfurth <floh-erfurth@arcor.de> wrote:
>>
>>> Miscellaneous failure (see text) (failed to
>>> find HTTP/bsdfloh.domain.tld@DOMAIN.TLD(kvno 9) in
>>> keytab /usr/local/etc/apache2/bsdflohkeytab)
>> <snip>
>>> Vno  Type         Principal
>>>  10  des-cbc-md5  HTTP/bsdfloh.domain.tld@DOMAIN.TLD
>>> What's wrong? Maybe because kvno differs, huh?
>>
>> Yes. Reset the password and regenerate the keytab to make sure the  
>> keytab
>> is in sync with the KDC.
> If keytab isn't in sync with the KDC, then the following command  
> wouldn't
> work (I think).

The problem is that your client have a non updated krb5 cred cache  
with a ticket the old kvno in it.
When you update the keytab, keep the older kvnos around for your  
maxium ticket lifetime.

So, go to the client and have then run kinit again.

Love

>