On 08/01/18 22:46, Robbie Harwood wrote:
lejeczek via FreeIPA-users <freeipa-users@lists.fedorahosted.org>
writes:

$ ipa-client-install --no-ntp --force-join

krb5kdc[1560686](info): preauth (encrypted_timestamp) verify
failure: Preauthentication failed

But after many tries(randomly) suddenly it would succeed.
Do the clocks match on the client and server?

Thanks,
--Robbie

Clocks are synced yet server' kerberos keeps logging this when client installation fails:

...
 preauth (encrypted_timestamp) verify failure: Preauthentication failed
...

Would be problem with, in kerberos?

16 23 25 26}) 10.5.6.17: NEEDED_PREAUTH: host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x for krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x, Additional pre-authentication required Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606061](info): closing down fd 11 Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606061](info): preauth (encrypted_timestamp) verify failure: Preauthentication failed Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 10.5.6.17: PREAUTH_FAILED: host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x for krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x, Preauthentication failed Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606061](info): closing down fd 11 Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 10.5.6.17: NEEDED_PREAUTH: host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x for krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x, Additional pre-authentication required Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606061](info): closing down fd 11 Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606060](info): preauth (encrypted_timestamp) verify failure: Preauthentication failed Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606060](info): AS_REQ (8 etypes {18 17 20 19 16 23 25 26}) 10.5.6.17: PREAUTH_FAILED: host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x for krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x, Preauthentication failed Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x krb5kdc[606060](info): closing down fd 11
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to