This did not seem to help...

On 08/22/2012 06:02 PM, Rob Crittenden wrote:
> Nathan Lager wrote:
>> [root@ipaserver PROD krb5kdc]# ipactl status
>> Directory Service: RUNNING
>> KDC Service: RUNNING
>> KPASSWD Service: RUNNING
>> MEMCACHE Service: RUNNING
>> HTTP Service: RUNNING
>> CA Service: RUNNING
>> [root@ipaserver PROD krb5kdc]# rpm -qa | grep ipa-server
>> ipa-server-selinux-2.2.0-16.el6.x86_64
>> ipa-server-2.2.0-16.el6.x86_64
> 
> I'd try removing /tmp/krb5cc_48. This is the ccache used by Apache for
> doing S4U2Proxy. No restart of httpd should be required.
> 
> rob
> 
>>
>>
>> On 08/22/2012 04:08 PM, Rob Crittenden wrote:
>>> Nathan Lager wrote:
>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>> Hash: SHA1
>>>>
>>>> I tried the same, kinit, and then ipa passwd commands as before,
>>>> here's the output:
>>>>
>>>> Aug 22 14:32:13 ipaserver.lafayette.edu krb5kdc[1438](info): AS_REQ (4
>>>> etypes {18 17 16 23}) ipa-servers-ip: NEEDED_PREAUTH:
>>>> lag...@systems.lafayette.edu for
>>>> krbtgt/systems.lafayette....@systems.lafayette.edu, Additional
>>>> pre-authentication required
>>>>
>>>> Aug 22 14:32:19 ipaserver.lafayette.edu krb5kdc[1438](info): AS_REQ (4
>>>> etypes {18 17 16 23}) ipa-servers-ip: ISSUE: authtime 1345660339,
>>>> etypes {rep=18 tkt=18 ses=18}, lag...@systems.lafayette.edu for
>>>> krbtgt/systems.lafayette....@systems.lafayette.edu
>>>>
>>>> Aug 22 14:32:35 ipaserver.lafayette.edu krb5kdc[1438](info): TGS_REQ
>>>> (4 etypes {18 17 16 23}) ipa-servers-ip: ISSUE: authtime 1345660339,
>>>> etypes {rep=18 tkt=18 ses=18}, lag...@systems.lafayette.edu for
>>>> HTTP/ipaserver.lafayette....@systems.lafayette.edu
>>>
>>> What version of IPA is this?
>>>
>>> Does ipactl status show all services up?
>>>
>>> rob
>>
>>
> 
> 

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to