KRB5_KT_KVNONOTFOUND (-1765328154L) error

[vir vir]

Hi,
 
I used ktadd
did klist -k I see kvno one number for <principal_name> and when I did kvno <principal_name> I saw a different number  for the same <principal_name>.
 
What could be the problem?
How I can fix it?
 
Thanks,
Alex
--- On Mon, 5/31/10, Ken Raeburn <raeburn at MIT.EDU> wrote:


From: Ken Raeburn <raeburn at MIT.EDU>
Subject: Re: KRB5_KT_KVNONOTFOUND (-1765328154L) error
To: "vir vir" <vitrou2004 at yahoo.com>
Cc: krbdev at mit.edu
Received: Monday, May 31, 2010, 11:22 AM


On May 31, 2010, at 14:01, vir vir wrote:
> Hi,
>  
> I am creating a keytab file and adding a new entry using ktutil addent
>  
> on linux service machine everything works fine on HP machine after I am adding it and running gss_accept_sec_context() I got KRB5_KT_KVNONOTFOUND. What could be the problem and how I can trace it?

A couple things you could look at are "klist -k" on the server to show the keytab contents, and "kvno" on the client to show the credentials.  Based on that message, my guess would be that you're adding the new entry with the wrong key version number; if kvno indicates the key version number stored on the KDC is different from that in the keytab file, you should fix the keytab file.  Using kadmin's "ktadd" is probably a safer way of getting it right, anyways.

Ken