{"id":3724,"date":"2018-03-07T01:08:55","date_gmt":"2018-03-07T06:08:55","guid":{"rendered":"http:\/\/microdevsys.com\/wp\/?p=3724"},"modified":"2018-03-07T01:09:12","modified_gmt":"2018-03-07T06:09:12","slug":"cannot-find-key-for-kvno-in-keytab","status":"publish","type":"post","link":"https:\/\/microdevsys.com\/wp\/cannot-find-key-for-kvno-in-keytab\/","title":{"rendered":"Cannot find key for <PRINCIPAL> kvno <NUM> in keytab"},"content":{"rendered":"<p>\n\tIf you are getting this:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\">krb5_child.log:(Tue Mar&nbsp; 6 23:18:46 2018) [[sssd[krb5_child[3193]]]] [map_krb5_error] (0x0020): 1655: [-1765328340][Cannot find key for nfs\/nfs01.nix.my.dom@NIX.my.dom kvno 6 in keytab]<\/span>\n<\/p>\n<p>\n\tThen you can resolve it by copying the old keytab file back (or removing the incorrect entries using <span style=\"font-family:courier new,courier,monospace;\">ktutil<\/span>).&nbsp; In our case we had made a saved copy and readded the NFS principals to the keytab file.&nbsp; You can list out the current principals in the keytab file using:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\">klist -kte \/etc\/krb5.keytab<\/span>\n<\/p>\n<p>\n\tThis was followed up by readding missing keytab keys from the IPA server:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\">ipa-getkeytab -s idmipa01.nix.my.dom -p nfs\/nfs-c01.nix.my.dom -k \/etc\/krb5.keytab<br \/>\n\tipa-getkeytab -s idmipa01.nix.my.dom -p nfs\/nfs01.nix.my.dom -k \/etc\/krb5.keytab<\/span>\n<\/p>\n<p>\n\tAlternately, create the keytab entries manually using <span style=\"font-family:courier new,courier,monospace;\">ktutil <\/span>above.\n<\/p>\n<p>\n\tCheers,<br \/>\n\tTom\n<\/p>\n<p>\n\t&nbsp;<\/p>\n\n    <div class=\"xs_social_share_widget xs_share_url after_content \t\tmain_content  wslu-style-1 wslu-share-box-shaped wslu-fill-colored wslu-none wslu-share-horizontal wslu-theme-font-no wslu-main_content\">\n\n\t\t\n        <ul>\n\t\t\t        <\/ul>\n    <\/div> \n","protected":false},"excerpt":{"rendered":"<p>If you are getting this: krb5_child.log:(Tue Mar&nbsp; 6 23:18:46 2018) [[sssd[krb5_child[3193]]]] [map_krb5_error] (0x0020): 1655: [-1765328340][Cannot find key for nfs\/nfs01.nix.my.dom@NIX.my.dom kvno 6 in keytab] Then you can resolve it by copying the old keytab file back (or removing the incorrect entries using ktutil).&nbsp; In our case we had made a saved copy and readded the NFS [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-3724","post","type-post","status-publish","format-standard","hentry","category-unix-linux-admin-stuff"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts\/3724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/comments?post=3724"}],"version-history":[{"count":2,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts\/3724\/revisions"}],"predecessor-version":[{"id":3727,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts\/3724\/revisions\/3727"}],"wp:attachment":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/media?parent=3724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/categories?post=3724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/tags?post=3724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}