Skip to main content
okhatab
Staff
okhatab
Staff
December 12, 2024

Technical Tip: How to use krb_test tool on FortiADC

  • December 12, 2024
  • 0 replies
  • 844 views
Description This article describes how to use the krb_test tool for Kerberos authentication testing and troubleshooting purposes on FortiADC using the CLI.
Scope FortiADC.
Solution
  1. Enter the command below to clear credential cache and keytab:

 

diagnose system krb_test -d

Cleared!

 

  1. Modify the command below using the required data before testing:

 

diagnose system krb_test s <SPN> -u <UPN> -n <delegator principal name> -p <delegator password>

 

For example: the command output below indicates an incorrect delegator account password has been used.

 

diagnose system krb_test -s http/www218.example.test@EXAMPLE.TEST -u adclocal2@EXAMPLE.TEST -n host/proxyadmin@EXAMPLE.TEST -p fortinet
== Initialize Kerberos context ==
== TKT status 0 ==
line: 837 errcode(-1765328360) Preauthentication failed
== KRB AS Failed ==

See the FortiADC administration guide for more information.
Terms & ConditionsAccessibility statement