rsyslog is not able to request host TGT kerberos ticket on RHEL6

Solution Verified - Updated -

Issue

If the system does not have a valid TGT and/or host ticket on the client or server, rsyslog does not correctly contact the kdc to refresh the tickets (/var/log/krb5kdc.log)

krb5kdc[2116](info): TGS_REQ (4 etypes {18 17 16 23}) 192.168.1.3: PROCESS_TGS: authtime 0, <unknown client> for <unknown server>, Ticket expired.

The administrator has to run kinit -k manually on the client and/or server to refresh the TGT.

Environment

Red Hat Enterprise Linux 6.3
ipa-server-2.2.0-16.el6.x86_64
krb5-server-1.9-33.el6.x86_64
rsyslog-5.8.10-2.el6.x86_64
rsyslog-gssapi-5.8.10-2.el6.x86_64
krb5-workstation-1.9-33.el6.x86_64

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.