OL-1229 — No Kerberos ticket for the proxy

What happened

negotiate (Kerberos/SPNEGO) was selected for proxy auth, but no usable ticket could be minted: no Kerberos credential cache, an expired TGT, or the proxy's SPN not resolving from this host. Distinct from OL-1222/ERR_PROXY_AUTH_FAILED — the proxy was never even offered a token to accept or reject. The fix is host-side: run kinit, or confirm the machine is domain-joined so Windows can obtain a ticket automatically.

What to do

Run kinit, or check that the machine is joined to the domain, then run openlatch system proxy test.

Note

This page is generated from the client source at a pinned commit. The message above is what the client prints.