lejeczek via FreeIPA-users wrote: > > > On 06/01/18 19:51, lejeczek via FreeIPA-users wrote: >> Failed to obtain host TGT: Major (851968): Unspecified GSS failure. >> Minor code may provide more information, Minor (2529638936): >> Preauthentication failed > > hi guys, > I hit that error again. What I noticed is > - on that candidate client when I changed resolver to look only at > 127.0.0.1(which was not running) and used --server & --domain (thus > essentially no dns) then client installation succeeded. > Would that be just a coincidence and DNS plays no role at this stage?
What I would recommend doing is leave DNS enabled and wait for a failed enrollment and see what master it is enrolling against. That should help narrow things down, especially if the failing master does not match the one you can force success with. rob _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org