topic Re: Error "kinit:keytab contain no suitable keys for HTTP/id" while getting initial creden in Administration and Deployment

Error "kinit:keytab contain no suitable keys for HTTP/id" while getting initial credentials

anoop213 — Wed, 04 Jul 2018 02:17:46 GMT

Hi Experts,

Kindly help me to resolve one of the issue which we encountered while configuring SAS IWA. krb5.conf in Linux configured proper domain [realms] and AD users can ssh to Linux server manually. But when try to configure keytab file and do kinit it fais and throw below error.

Getting below error while try to kinit the keytab file in Linux (RHEL 6.8) received from AD.

kinit:keytab contain no suitale keys for HTTP/auztoo while getting initial credentials.

Attached error screen shots for

Re: Error "kinit:keytab contain no suitable keys for HTTP/id" while getting initial creden

JuanS_OCS — Mon, 09 Jul 2018 08:15:21 GMT

Hi @anoop213,

this is pure Kerberos question, not even related to SAS at this point. I would really ask your system admins about that.

A brief attempt to help you:

It seems to me as there is some mismatch between the keys in the keytab and the krb5 config file. Which one is the last you changed? the krb5 config?

Also. maybe you might need to register the keys, if they are not even there, in they keytab file.

I am not a Kerberos expert, but this is what I would do: first ensure krb5 is the final one, then ensure my keytab is correct, then update what ever config necessary in SAS or other applications.

Re: Error "kinit:keytab contain no suitable keys for HTTP/id" while getting initial creden

anoop213 — Thu, 12 Jul 2018 01:34:29 GMT

Agree this is kerbros issue, and we are trying to resolve it. I'll update if I find a solution.

Re: Error "kinit:keytab contain no suitable keys for HTTP/id" while getting initial creden

ShelleySessoms — Thu, 12 Jul 2018 13:07:07 GMT

Since this is a Kerberos issue, I have marked @JuanS_OCS as the accepted solution to help others who may land on this topic.

@anoop213, if you find helpful information from Kerberos, please do supply it here. Thanks and good luck!