On 3/4/2010 10:56 PM, Stephen Joyce wrote: > On Thu, 4 Mar 2010, Jeffrey Altman wrote: > >> [C:\]translate_et 19270408 >> 19270408 = ticket contained unknown key version number >> >> What does kvno report when using the regular user? >> Is it still three? My guess is not. > > After a kinit on a client (to a regular user account in AD), the kvno of > afs/celln...@addomain is still 3.
well, the error is unknown kvno. either the kvno in the service ticket is not 3 or there is no kvno entry for 3 in the KeyFile. Unfortunately, there is no mechanism for logging errors from within the rxkad security class. The best you can do is attach a debugger to a service that you are connecting to and place a break point at each of the two locations where RXKADUNKNOWNKEY is set as the error code.
smime.p7s
Description: S/MIME Cryptographic Signature
