KDC does not respond within the required time
Try one or more of the following:
MAKE SURE THAT THE IP ADDRESS OR HOST NAME OF THE KDC IS CORRECT
1 From the Embedded Web Server, click Settings > Device Solutions > Solutions (eSF) > PKI Authentication >
Configure.
2 For Simple Kerberos Setup, make sure that the IP address or host name specified for the Domain Controller is
correct.
3 Apply the changes.
MAKE SURE THAT THE KDC IS AVAILABLE
You can specify multiple KDCs in the PKI Authentication settings or in the krb5.conf file.
MAKE SURE THAT PORT 88 IS NOT BLOCKED BY A FIREWALL
Port 88 must be opened between the printer and the KDC for authentication to work.
Cannot find user realm in the Kerberos configuration file
M
AKE SURE THAT THE WINDOWS DOMAIN IS SPECIFIED IN THE KERBEROS SETTINGS
1 From the Embedded Web Server, click Settings > Device Solutions > Solutions (eSF) > PKI Authentication >
Configure.
2 From the Simple Kerberos Setup, add the Windows Domain in lowercase to the Domain setting.
For example, if the Domain setting is mil,.mil and the Windows Domain is x.y.z, then change the Domain
setting to mil,.mil,x.y.z.
3 If you are using a krb5.conf file, then add an entry to the domain_realm section. Map the lowercase Windows
domain to the uppercase realm (similar to the existing mapping for the “mil” domain).
Cannot find realm on card in the Kerberos configuration file
This error occurs during smart card login.
UPLOAD A KERBEROS CONFIGURATION FILE AND MAKE SURE THAT THE REALM HAS BEEN ADDED TO THE FILE
The PKI Authentication settings do not support multiple Kerberos Realm entries. If multiple realms are needed, then
create and upload a krbf5.conf file containing the needed realms. If you are already using a Kerberos configuration
file, then make sure that the missing realm is correctly added to the file.
Troubleshooting 61
To Next Page
Loading...
Need help?
General
