Key version number for principal in key table is incorrect

Barbat, Calin c.barbat at
Tue Oct 12 03:32:55 EDT 2004

Hi to the experts,

I have a somewhat special setup here, some of you are in the know of it:

I have three hosts running SAP servers under Linux, Win2k Server and SunOS respectively and am trying to make single sign-on working using MIT Kerberos.
All three are connected to an Win2k DC. 

There are two issues left to do: ensure that the servers are up and running as long as possible - somehow it must be possible to renew the ticket indefinitely, does anyone know how to do this?

The second one is that the SAP server writes the following GSSAPI message in it's log: "Key version number for principal in key table is incorrect".
What could it be? The output of ktpass states that vno is 1 and ktutil on the Linux box says KVNO is 1 too.

By the way: all three SAP servers use the same service principal in the AD, could this be an issue?

Thanks in advance,

Calin Barbat.

More information about the Kerberos mailing list