Kinit -k Fails with Status 0x96c73a9a

Resolving The Problem

Problem

Kinit -k fails with message EUVF06014E - Unable to obtain initial credentials. Status 0x96c73a9a - Unable to locate security server.

Resolution

The domain in the kerberos principal needs to be uppercase; in this instance, it was lowercase:

Incorrect
kinit -k krbsvr400/systemi.mycompany.com@mycompany.com
EUVF06014E Unable to obtain initial credentials.
Status 0x96c73a9a - Unable to locate security server.

Correct
kinit -k krbsvr400/systemi.mycompany.com@MYCOMPANY.COM
$

If the formatting is correct and the same message occurs when doing the kinit -k, verify the name of the KDC is correct by checking the KDC name in the /qibm/userdata/os400/networkauthentication/krb5.conf file. The address for the KDC should be resolvable by the IBM i. You can check this by copying the address (without the port number) and attempting a PING to that address from the IBM i command line. If the system can find the IP address of the name that was pinged, it is resolving that address. If not, check network settings.