The following error is reported when attempting to renew Kerberos credentials
+++++++++++++++++++
[dublin1@linux2 root]$ /opt/quest/bin/vastool kinit -R
ERROR: Could not renew credential
ERROR: VAS_ERR_KRB5: Kerberos error
Failed to obtain credentials. Client: dublin1@OICRK1.LAB, Service: krbtgt/OICRK1.LAB@OICRK1.LAB, Server: (null)
Caused by:
KRB5KDC_ERR_BADOPTION (-1765328371): KDC can't fulfill requested option
++++++++++++++++++++
The Microsoft security patch (KB4586830), released during November 2020, includes an update which when installed on domain controllers will refuse to renew existing service tickets and Ticket-Granting Tickets (TGT)s
Resolution:
Update all Domain Controller's with Microsoft security patches which have a release date on or after 08 December 2020.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center