Have you checked the windows AD server (running kerberos) is behind the firewall?

Code:

telnet <AD server> 88, as kerberos service runs on port 88

I assume you have installed the below

Code:

# lslpp –L | grep krb5 

krb5.client.rte 1.5.0.1 C F Network Authentication Service 

krb5.client.samples 1.5.0.1 C F Network Authentication Service

krb5.lic 1.5.0.1 C F Network Authentication Service

Also, make sure you have the correct hostname

Code:

nslookup <AD server>

Ping it

Code:

ping <AD server>

Make sure you are changing setting correctly and restarting the service

Code:

like /etc/security/user,  /etc/methods.cfg etcc.,

Look at the system log file, where it is blocking the connecting, we need to know whether your local AIX is connecting to your AD server for authentication.

Some times the problem could be on AD.

Can you paste what command you are using to configure kerberos?

Code:

like your "mkkrb5clnt" command

Code:

mkkrb5clnt -r <YOUR DOMAIN NAME> -c <your windows AD server> -s <your windows AD server> -d <your domain name> -D  : note that after '-r' I have domain name in CAPS

Now run

Code:

/usr/krb5/bin/kinit <username>

followed by

Code:

/usr/krb5/bin/klist

, whats the output?

If you want to reinstall 'kerberos'

Code:

mkkrb5clnt -U, hit 'y' to unconfigure

Also, copy your /etc/security/user file for default stanza and your methods.cfg file

let me know once you are done with those.


Also, if you want to do it simple and straight, here is the IBM method of doing it.

Code:

https://www.ibm.com/developerworks/aix/library/au-aix_multiplekerberos/