Robbie Harwood via FreeIPA-users wrote:
> Marisa Sandhoff via FreeIPA-users <[email protected]>
> writes:
> 
>> [18/Mar/2019:14:36:27.577557647 +0100] - ERR - set_krb5_creds - Could
>> not get initial credentials for principal
>> [ldap/[email protected]] in
>> keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see
>> e-text))
> 
> Can you inspect this keytab?  `klist -ekt /etc/dirsrv/ds.keytab`?

Those errors are normal. 389-ds was rather chatty about starting up when
it doesn't have a ccache.

You should look at the CA logs in /var/log/pki/pki-tomcat/ca

To bring IPA up without the CA to limp along while you diagnose the
problem run: ipactl start --ignore-service-failures

rob

_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to