I just found this additional log file entries on my IPA server.  The
vm-mapsdc2 is one of the domain controllers/DNS servers not associated
with IPA other than being one of our authoritative DNS servers.  Is
something misconfigured in IPA on the server side?

Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1180](info): AS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: NEEDED_PREAUTH:
host/ovm-c19-db.<domain>@<DOMAIN> for krbtgt/<DOMAIN>@<DOMAIN>,
Additional pre-authentication required
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1178](info): AS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: ISSUE: authtime 1344373262, etypes
{rep=18 tkt=18 ses=18}, host/ovm-c19-db.<domain>@<DOMAIN> for
krbtgt/<DOMAIN>@<DOMAIN>
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1180](info): TGS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: ISSUE: authtime 1344373262, etypes
{rep=18 tkt=18 ses=18}, host/ovm-c19-db.<domain>@<DOMAIN> for
krbtgt/<DOMAIN>@<DOMAIN>
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1178](info): TGS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: UNKNOWN_SERVER: authtime 0,
host/ovm-c19-db.<domain>@<DOMAIN> for
ldap/vm-13thdc2.<domain>@<DOMAIN>, Server not found in Kerberos
database
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1178](info): AS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: NEEDED_PREAUTH:
host/ovm-c19-db.<domain>@<DOMAIN> for krbtgt/<DOMAIN>@<DOMAIN>,
Additional pre-authentication required
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1180](info): AS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: ISSUE: authtime 1344373262, etypes
{rep=18 tkt=18 ses=18}, host/ovm-c19-db.<domain>@<DOMAIN> for
krbtgt/<DOMAIN>@<DOMAIN>
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1178](info): TGS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: ISSUE: authtime 1344373262, etypes
{rep=18 tkt=18 ses=18}, host/ovm-c19-db.<domain>@<DOMAIN> for
krbtgt/<DOMAIN>@<DOMAIN>
Aug 07 14:01:02 ovm-auth.<domain> krb5kdc[1180](info): TGS_REQ (4
etypes {18 17 16 23}) 172.30.40.60: UNKNOWN_SERVER: authtime 0,
host/ovm-c19-db.<domain>@<DOMAIN> for
ldap/vm-mapsdc2.<domain>@<DOMAIN>, Server not found in Kerberos
database

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to