/build/static/layout/Breadcrumb_cap_w.png

Error: Could not create keytab file

Hi Ninjas

 

I'm having issues with our K1000. We try to get it into our Domain but it always shows the message "Could not create keytab file".

So far I've found this article http://www.kace.com/de/support/resources/kb/solutiondetail?sol=SOL111863 at the bottom it says:

  • You might get the error, "Could not create keytab file".
  • This is needed since by default we create a computer and user object in this container for the join.

But my question is, where does it want to create the objects? Where do I need to look for the error?

 

Thank you

Regards

An

 

EDIT1: I have created a Ticket with Dell. I'll update this Question as soon I get an answer.

EDIT2: Just for anyone in the future looking for the same issue. I don't know why but KACE needs to create a Computer AND an User item in the Computer OU. If you're in a global Company and do not get the rights to do that, you cannot use SSO on your Kace.


1 Comment   [ + ] Show comment
  • I know this is an old article but I have this same problem. We unjoined/rejoined the K1000 to the domain and it recreated the server and the Kerberos keytab account. The event log shows no errors and I can see the computer/user entries in AD. The SSO still does not work... I have tried the unjoin/join process over again and still no SSO functionality. Any ideas? I have a ticket open with Dell but so far no answer. - agahlbeck 8 years ago

Answers (3)

Posted by: jknox 10 years ago
Red Belt
1

Contact KACE support.  I seem to recall it taking a tether to fix if that article doesn't resolve your issue.

Posted by: pcooper 5 years ago
Senior White Belt
1

Disable SSO and restart services.  You have to delete the computer account and user account created previously by the last time you joined the k1000 to the domain.  Look for the computer account "k1000" and the user account "k1000-http" in "Active Directory Users and Computers" and delete both of those objects, then try to join the k1000 again.    You can also read the error log in the k1000  go to Settings -> Logs and then select "Server Errors" in the log drop down.  

Posted by: Nico_K 10 years ago
Red Belt
1

Hi An,

please verify (this is not part of the article, unfortunately) that a computer item is created in your domain, as the SSO (and I assume you want to use this) needs a computer item for the KBox.
If you don't have one you may run in that issue. If this item is configured correctly, I agree with Jknox


Comments:
  • Hi - Yes the Computer Item is created. I opened a ticket with Dell. I'll update this Post as soon I have got an answer. So future searchers will find an answer here. - aazimm 10 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ