lejeczek via FreeIPA-users wrote:
> On 06/01/18 19:51, lejeczek via FreeIPA-users wrote:
>> Failed to obtain host TGT: Major (851968): Unspecified GSS failure.
>> Minor code may provide more information, Minor (2529638936):
>> Preauthentication failed 
> hi guys,
> I hit that error again. What I noticed is
> - on that candidate client when I changed resolver to look only at
> was not running) and used --server & --domain (thus
> essentially no dns) then client installation succeeded.
> Would that be just a coincidence and DNS plays no role at this stage?

What I would recommend doing is leave DNS enabled and wait for a failed
enrollment and see what master it is enrolling against. That should help
narrow things down, especially if the failing master does not match the
one you can force success with.

FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to