Problem
"Pre-authentication failed while getting initial ticket"
Reason
This Kerberos message typically occurs for one of three reasons:
-
The LDAP password or user name was incorrect.
-
IWSVA was not able to find the KDC database AFS salted key.
-
The clock settings on each server do not match (or, are more than 3-4 minutes apart).
Solution
-
Confirm and then re-enter a correct LDAP user ID and password.
-
Check your KDC logs for "file not found" messages, and replace or re-identify the
missing file.
-
Synchronize each machine to an Internet-based atomic clock, or use clock/time synchronization
software on each machine.
See also