For kerberos clients /etc/krb5.keytab isn't loaded at system startup. ktutil shows an empty list until the existing keytab is loaded. With the next reboot the list is empty again until reread by "echo rkt /etc/krb5.keytab | ktutil".<br />
<br />
If no other means or login allowed:<br />
keylist is empty -> ksu fails<br />
ssh to this system with a proper authenticated user from an other system -> password required
↧