Thanks for your help. I've got in krb5kdc.log :
Sep 20 17:00:47 ipa.example.com krb5kdc[14155](info): TGS_REQ (4 etypes {18 17 16 23}) 129.104.11.72: ISSUE: authtime 1348153247, etypes {rep=18 tkt=18 ses=18}, host/ elide.example....@example.com for ldap/ipa.lix.polytechniqu e...@example.com Sep 20 17:00:56 ipa.example.com krb5kdc[14164](info): AS_REQ (4 etypes {18 17 16 23}) 129.104.11.72: NEEDED_PREAUTH: re...@example.com for krbtgt/example....@example.com, Additional pre-authentication required Sep 20 17:00:56 ipa.example.com krb5kdc[14169](info): preauth (timestamp) verify failure: No matching key in entry Sep 20 17:00:56 ipa.example.com krb5kdc[14169](info): AS_REQ (4 etypes {18 17 16 23}) 129.104.11.72: PREAUTH_FAILED: re...@example.com for krbtgt/example....@example.com, Preauthentication failed Sep 20 17:00:56 ipa.example.com krb5kdc[14161](info): AS_REQ (4 etypes {18 17 16 23}) 129.104.11.72: NEEDED_PREAUTH: host/elide.example....@example.com for krbtgt/example....@example.com, Additional pre-auth entication required I have spent the whole day trying to debug my server. I will re-install and re-migrate to see if I have missed something .. 2012/9/20 Dmitri Pal <d...@redhat.com> > On 09/20/2012 12:50 PM, James James wrote: > > Oups .. migration mode is enable ... > > > The ldap (access, error) and kerberos logs from the server would be > helpful to troubleshoot. > /var/log/dirsrv/... > krb5kdc.log > > > > 2012/9/20 James James <jre...@gmail.com> > >> Yes config mod is enabled >> >> 2012/9/20 Dmitri Pal <d...@redhat.com> >> >>> On 09/20/2012 12:30 PM, James James wrote: >>> >>> Hi, >>> >>> I've done a migration from ldap to ipa. Everything works well but when I >>> try to change my password in the ui ( >>> https://ipa.example.com/ipa/migration) I have this error message : >>> We're Sorry >>> >>> *There was a problem with your request. Please, try again later.* >>> >>> If the problem persists, contact your administrator. >>> >>> In the log : >>> >>> Thu Sep 20 18:29:54 2012] [error] ipa: ERROR: migration bind failed: >>> Inappropriate authentication () >>> >>> Can somebody give me some help ? >>> >>> >>> And I assume the migration is in fact enabled? >>> >>> # ipa config-mod --enable-migration=TRUE >>> >>> >>> >>> Can it be that you are hitting >>> https://bugzilla.redhat.com/show_bug.cgi?id=822350 >>> >>> >>> >>> >>> _______________________________________________ >>> Freeipa-users mailing >>> listFreeipa-users@redhat.comhttps://www.redhat.com/mailman/listinfo/freeipa-users >>> >>> >>> >>> -- >>> Thank you, >>> Dmitri Pal >>> >>> Sr. Engineering Manager for IdM portfolio >>> Red Hat Inc. >>> >>> >>> ------------------------------- >>> Looking to carve out IT costs?www.redhat.com/carveoutcosts/ >>> >>> >> > > > -- > Thank you, > Dmitri Pal > > Sr. Engineering Manager for IdM portfolio > Red Hat Inc. > > > ------------------------------- > Looking to carve out IT costs?www.redhat.com/carveoutcosts/ > >
_______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users