kinit: Pre-authentication failed: No key table entry found for PRINCIPAL$@DOMAIN.COM while getting initial credentials

Solution Verified - Updated -

Issue

$ kinit username@WEBSITE.COM -k -t username.keytab
kinit: No key table entry found for username@WEBSITE.COM while getting initial credentials
  • Upon attempting a kinit, I receive the following error:
# kinit -k /etc/krb5.keytab 'PRINCIPAL$@DOMAIN.COM'
kinit: No key table entry found for PRINCIPAL$@DOMAIN.COM while getting initial credentials
  • SSSD fails to bind with a Domain due to the following error:
[ldap_child[754705]] [sss_child_krb5_trace_cb] (0x4000): [754705] 1650432861.376318: Preauth module encrypted_timestamp (2) (real) returned: -1765328203/Key table entry not found
[ldap_child[754705]] [ldap_child_get_tgt_sync] (0x0040): krb5_get_init_creds_keytab() failed: -1765328174
[ldap_child[754705]] [ldap_child_get_tgt_sync] (0x0010): Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Pre-authentication failed: Key table entry not found. Unable to create GSSAPI-encrypted LDAP connection.
[ldap_child[754705]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_DOMAIN.COM]
[ldap_child[754705]] [main] (0x0020): ldap_child_get_tgt_sync failed.

Environment

  • Red Hat Enterprise Linux
  • Ansible Tower >= 3.3
  • SSSD

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content