Error: Could not create keytab file
Hi Ninjas
I'm having issues with our K1000. We try to get it into our Domain but it always shows the message "Could not create keytab file".
So far I've found this article http://www.kace.com/de/support/resources/kb/solutiondetail?sol=SOL111863 at the bottom it says:
- You might get the error, "Could not create keytab file".
- This is needed since by default we create a computer and user object in this container for the join.
But my question is, where does it want to create the objects? Where do I need to look for the error?
Thank you
Regards
An
EDIT1: I have created a Ticket with Dell. I'll update this Question as soon I get an answer.
EDIT2: Just for anyone in the future looking for the same issue. I don't know why but KACE needs to create a Computer AND an User item in the Computer OU. If you're in a global Company and do not get the rights to do that, you cannot use SSO on your Kace.
-
I know this is an old article but I have this same problem. We unjoined/rejoined the K1000 to the domain and it recreated the server and the Kerberos keytab account. The event log shows no errors and I can see the computer/user entries in AD. The SSO still does not work... I have tried the unjoin/join process over again and still no SSO functionality. Any ideas? I have a ticket open with Dell but so far no answer. - agahlbeck 8 years ago
Answers (3)
Contact KACE support. I seem to recall it taking a tether to fix if that article doesn't resolve your issue.
Disable SSO and restart services. You have to delete the computer account and user account created previously by the last time you joined the k1000 to the domain. Look for the computer account "k1000" and the user account "k1000-http" in "Active Directory Users and Computers" and delete both of those objects, then try to join the k1000 again. You can also read the error log in the k1000 go to Settings -> Logs and then select "Server Errors" in the log drop down.
Hi An,
please verify (this is not part of the article, unfortunately) that a computer item is created in your domain, as the SSO (and I assume you want to use this) needs a computer item for the KBox.
If you don't have one you may run in that issue. If this item is configured correctly, I agree with Jknox
Comments:
-
Hi - Yes the Computer Item is created. I opened a ticket with Dell. I'll update this Post as soon I have got an answer. So future searchers will find an answer here. - aazimm 10 years ago
