Running ipa-server-install I get:

Configuring client side components
Using existing certificate '/etc/ipa/ca.crt'.
Client hostname:
DNS Domain:
IPA Server:
BaseDN: dc=test,dc=internal,dc=johnrshannon,dc=com

Skipping synchronizing time with NTP server.
New SSSD config will be created
Configured sudoers in /etc/nsswitch.conf
Configured /etc/sssd/sssd.conf
[try 1]: Forwarding 'schema' to json server
No valid Negotiate header in server response
The ipa-client-install command failed. See
/var/log/ipaclient-install.log for more information
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR
   Configuration of client side components failed!

The system is a fresh, up to date, Fedora 26:


configured to include the FREE-IPA repository. FREE-IPA was installed
yesterday with:

dnf install freeipa-*

and running ipa-server-install. I'm not sure how to proceed. I want to
use pkinit.

The log file shows that an exception was raised during the execution of:

2017-09-15T14:52:27Z DEBUG args=/usr/sbin/ipa-client-install --on-master
--unattended --domain --server --realm


John R. Shannon

FreeIPA-users mailing list --
To unsubscribe send an email to

Reply via email to