"Client not found in Kerberos database" error when joining Edge SWG to Windows Domain

Products

• ISG Proxy

Issue/Introduction

You are receiving "Client not found in Kerberos database" error when joining Edge SWG to Windows Domain

Packet capture shows eRR-C-PRINCIPAL-UNKNOWN (6) received from DC

 

Environment

IWA Direct

Cause

Error code 6 for this means that the domain controller to which the request was made does not host the account

Resolution

You must provide a username that exists on the DC with proper privilege's.

This issue could be caused by using domain\username format instead of just username if DC is expecting username. It can be caused by incorrect username being used to join as well.