so, what do you see in /var/log/ipaclient-install.log?

On Sun, Mar 29, 2020 at 9:34 AM Faraz Younus <fara...@gmail.com> wrote:

> Yes I double checked password is ok on both sides
>
> On Sun, Mar 29, 2020 at 12:21 PM Natxo Asenjo via FreeIPA-users <
> freeipa-users@lists.fedorahosted.org> wrote:
>
>>
>>
>> On Sun, Mar 29, 2020 at 8:10 AM Faraz Younus via FreeIPA-users <
>> freeipa-users@lists.fedorahosted.org> wrote:
>>
>>> Hi Team,
>>>
>>>       command: /usr/sbin/ipa-client-install --domain example.com
>>> --mkhomedir  --password abc123 "  --server ipa9.example.com --unattended
>>>
>>> e, "cmd": ["/usr/sbin/ipa-client-install", "--domain", "
>>> fixedandmobile.com", "--mkhomedir", "--password", "abc123", "--server",
>>> "ipa9.example.com", "--unattended"], "delta": "0:01:03.451321", "end":
>>> "2020-03-29 05:57:22.013451", "msg": "non-zero return code", "rc": 1,
>>> "start": "2020-03-29 05:56:18.562130", "stderr": "Hostname:
>>> ipacentos.example.com\nRealm: EXAMPLE.COM\nDNS Domain: example.com\nIPA
>>> Server: ipa9.example.com\nBaseDN: dc=example,dc=com\nSynchronizing time
>>> with KDC...\nUnable to sync time with IPA NTP server, assuming the time is
>>> in sync. Please check that 123 UDP port is opened.\nOTP case, CA cert
>>> preexisted, use it\nJoining realm failed: Incorrect
>>> password.\n\nInstallation failed. Rolling back changes.\nIPA client is not
>>> configured on this system.", "stderr_lines": ["Hostname:
>>> ipacentos.example.com", "Realm:EXAMPLE.COM", "DNS Domain: example.com",
>>> "IPA Server: ipa9.example.com", "BaseDN: dc=example,dc=com",
>>> "Synchronizing time with KDC...", "Unable to sync time with IPA NTP server,
>>> assuming the time is in sync. Please check that 123 UDP port is opened.",
>>> "OTP case, CA cert preexisted, use it", "Joining realm failed: Incorrect
>>> password.", "", "Installation failed. Rolling back changes.", "IPA client
>>> is not configured on this system."], "stdout": "\u001b[?1034h",
>>> "stdout_lines": ["\u001b[?1034h"]}
>>>
>>
>>
>> it does say 'incorrect password', did you check that?
>>
>> --
>> Groeten,
>> natxo
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
>> To unsubscribe send an email to
>> freeipa-users-le...@lists.fedorahosted.org
>> Fedora Code of Conduct:
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>>
>

-- 
--
Groeten,
natxo
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to