IBM Books

Diagnosis Guide


Error symptoms, responses, and recoveries

The recovery actions in Table 49 correspond to the questions listed in Diagnostic procedures.

Table 49. Per Node Key Management symptoms and recovery actions

Symptom Recovery
spnkeymand or other SP services cannot login. See
  1. Are key files for the SP System Services on the host where spnkeyman is running?
  2. Have the password expiration times been changed in the SP DCE organization, spsec-services, to indicate when keys should expire?
  3. Have the SP server keys expired?
spnkeymand is not updating an SP server key. See
  1. Are key files for the SP System Services on the host where spnkeyman is running?
  2. Is the DCE registry populated with the principals and accounts for SP Services?
  3. Has the SP DCE organization, spsec-services, been created, and have the SP service principals been added to that organization?
spnkeymand is not updating any SP server keys. See
  1. Are key files for the SP System Services on the host where spnkeyman is running?
  2. Is the DCE registry populated with the principals and accounts for SP Services?
  3. Has the SP DCE organization, spsec-services, been created, and have the SP service principals been added to that organization?
  4. Have the password expiration times been changed in the SP DCE organization, spsec-services, to indicate when keys should expire?
  5. Has the spnkeyman daemon been started? Is it sleeping?
spnkeymand is not finding an SP service. See
  1. Is the DCE registry populated with the principals and accounts for SP Services?
  2. Are key files for the SP System Services on the host where spnkeyman is running?
  3. Has the SP DCE organization, spsec-services, been created, and have the SP service principals been added to that organization?
DCE failures. See
  1. Is DCE installed on the host where spnkeyman is running?
  2. Are the DCE daemons running on the host where spnkeyman is running?
  3. Is There a route for the DCE client daemons to access the DCE server daemons?
secd daemon not running. See Is the DCE secd daemon running on the DCE server host?.


[ Top of Page | Previous Page | Next Page | Table of Contents | Index ]