Nathan Lager wrote:
[root@ipaserver PROD krb5kdc]# ipactl status
Directory Service: RUNNING
KDC Service: RUNNING
KPASSWD Service: RUNNING
MEMCACHE Service: RUNNING
HTTP Service: RUNNING
CA Service: RUNNING
[root@ipaserver PROD krb5kdc]# rpm -qa | grep ipa-server
ipa-server-selinux-2.2.0-16.el6.x86_64
ipa-server-2.2.0-16.el6.x86_64


I'd try removing /tmp/krb5cc_48. This is the ccache used by Apache for doing S4U2Proxy. No restart of httpd should be required.

rob



On 08/22/2012 04:08 PM, Rob Crittenden wrote:
Nathan Lager wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I tried the same, kinit, and then ipa passwd commands as before,
here's the output:

Aug 22 14:32:13 ipaserver.lafayette.edu krb5kdc[1438](info): AS_REQ (4
etypes {18 17 16 23}) ipa-servers-ip: NEEDED_PREAUTH:
lag...@systems.lafayette.edu for
krbtgt/systems.lafayette....@systems.lafayette.edu, Additional
pre-authentication required

Aug 22 14:32:19 ipaserver.lafayette.edu krb5kdc[1438](info): AS_REQ (4
etypes {18 17 16 23}) ipa-servers-ip: ISSUE: authtime 1345660339,
etypes {rep=18 tkt=18 ses=18}, lag...@systems.lafayette.edu for
krbtgt/systems.lafayette....@systems.lafayette.edu

Aug 22 14:32:35 ipaserver.lafayette.edu krb5kdc[1438](info): TGS_REQ
(4 etypes {18 17 16 23}) ipa-servers-ip: ISSUE: authtime 1345660339,
etypes {rep=18 tkt=18 ses=18}, lag...@systems.lafayette.edu for
HTTP/ipaserver.lafayette....@systems.lafayette.edu

What version of IPA is this?

Does ipactl status show all services up?

rob




_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to