If you have a keytab file, it means there was a wapt account in Active Directory at some point.

You can delete the keytab and run postconf to force its re-creation ((be careful not to delete the machine account afterwards :) )


Problem solved, I followed your instructions...

The problem is this... apparently you're using Kerberos, but you don't have a WAPT machine account in your Active Directory.

Do you have a /etc/nginx/http-krb5.keytab file on your WAPT server?


I haven't installed the WAPT server, so I'm just figuring things out by trial and error :D ...

Sorry, my mistake in my previous message:

I'll correct it:

Can you verify that the machine account in your Active Directory server still exists?

If so, what is the value of the ServicePrincipalName attribute?


I have a WAPT administrator account on our Active Directory, but I don't...

sfonteneau wrote: ↑July 3, 2026 - 9:32 AM Good morning

Code: Select all

gss_init_sec_context() failed: Server not found in Kerberos database

Can you verify that the machine account in your wapt server still exists?

If so, what is the value of the ServicePrincipalName attribute?

Could you tell me the steps to do this?

Isn't 192.168.1.11 listed in /etc/hosts? (bad configuration)

Kinit is trying to connect to 192.168.1.11...


Hello, I modified the hosts file to show the correct IP address.

I then ran the commands again on the Linux server:


root@SRV-WAPT:/etc# kdestroy
root@SRV-WAPT:/etc# kinit ...

sfonteneau wrote: ↑July 2, 2026 - 3:59 PM

Code: Select all

 
 connect to 192.168.1.11 port 443 from 192.168.1.10 port 34656 failed: No route to host
 

What is the server's IP address?

192.168.1.10

Can you tell me what this returns on the WAPT server?

https://www.wapt.fr/fr/doc/wapt-security-configuration-server.html#attempting-an-authentication-with-curl



root@SRV-WAPT:/home/wapt# kdestroy
root@SRV-WAPT:/home/wapt# kinit
Password for
root@SRV-WAPT ...

Hello rlegrand,

when you prepare the machine, do you select the template with AD integration and generate the DJoin file? If so, do you have multiple Active Directory instances? And what is the propagation time for AD changes? It's possible you created the DJoin file...

Hello,

Yes, registration via Kerberos.

Linux server version 2.6.1.17834.

When I run `wapt-get register` on the client machine, it asks for credentials. I'm not sure why; I don't think this was happening before.

It worked fine before, I have the impression that the registration...

Hello,

I'm encountering a problem deploying Windows 11 with WADS. The OS deploys correctly, but the WAPT agent on the machine no longer registers with the server, and the post-installation script also fails to execute.

I've tested the deployment on two different machines, and I...