To make sure that an NIS+ password for the principal (user or host) exists in the cred table, run the following command in the principal's home domain
nisgrep -A cname=principal cred.org_dir.domainname |
If you are running nisgrep from another domain, the domainname must be fully qualified.