Clearing Kerberos environment settings prior to client tracing

Detailed System Requirements

Abstract

This technote gives a general overview on how to obtain a clean 'network' trace of a kerberos server ticket exchange.
This document is Windows pc client oriented, but logic can be applied to the IBM i system as a client as well.
This document assumes the customer successfully completed setup technote N1012326; IBM i Single Sign-On Configuration.

Content

Prepare the pc client to allow new kerberos connections......

(may have to invoke 'run as administrator', for the msdos prompt)
1. Clear DNS cache using:
    ipconfig /flushdns
2. Clear NetBIOS cache using:
    nbtstat -RR
3. Clear user Kerberos tickets using:
    klist purge
4. Clear system / computer Kerberos tickets using (Vista or higher only):
    Klist -li 0x3e7 purge

Follow Wireshark pc client tracing instructions from technote N1014338

Trace the connection to the SSO target system.
If an open IBM case, upload the cap/pcap file to www.ecurep.ibm.com

Reference:
N1012326; IBM i Single Sign-On Configuration
N1020195 EIM/NAS Error Codes & Solutions

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.2.0"}]

Product Synonym

sso;single sign-on

Was this topic helpful?

Document Information

Modified date:
07 November 2018

UID

ibm10738923

Tips