On 10/13/2017 09:48 AM, Mark Haney wrote:
I tried changing HOST/ to host/ and got this:
Certificate at same location is already used by request with nickname "20171013123749"

Seems it doesn't matter on this setup.  Oh, probably should mention this is a CentOS 6.9 box. In case that matters.

Okay, we're getting somewhere now.  Turns out I'm a giant moron. The krb5.conf file I was using was incorrect.  The domain_realm section didn't include the 'astacalaska.net' bit. So, when I got that fixed and issued a new getcert request, I have a new error:

Request ID '20171013140647':
    ca-error: Error setting up ccache for "host" service on client using default keytab: Generic preauthentication failure.
    stuck: yes

I'd be more specific, but this was a really generic error message.

Mark Haney
Network Engineer at NeoNova
919-460-3330 option 1
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to