Hebert, Henry wrote:
I have inherited an ipa system that has been running fantastic.  However
the gui is no longer functioning.  I was wondering if this list has seen
this sort of error in the past.

hostname# kinit admin
kinit: Clients credentials have been revoked while getting initial

This is unrelated to the GUI. It appears that the admin account is disabled or locked due to too many failed logins. Using any other user, can you do ipa user-show admin?

Look for:

  Account disabled: True

If it is False then try ipa user-status admin see the number of failed logins.


so i then tried

[hostname]# cat /tmp/moz.log
64608032[7fad03b53150]:   using REQ_DELEGATE
64608032[7fad03b53150]:   service = hostname
64608032[7fad03b53150]:   using negotiate-gss
64608032[7fad03b53150]: entering nsAuthGSSAPI::nsAuthGSSAPI()
64608032[7fad03b53150]: Attempting to load gss functions
64608032[7fad03b53150]: entering nsAuthGSSAPI::Init()
64608032[7fad03b53150]: nsHttpNegotiateAuth::GenerateCredentials()
64608032[7fad03b53150]: entering nsAuthGSSAPI::GetNextToken()
64608032[7fad03b53150]: gss_init_sec_context() failed: Unspecified GSS
failure.  Minor code may provide more information
64608032[7fad03b53150]:   leaving nsAuthGSSAPI::GetNextToken [rv=80004005]

Thanks in advance!


Henry Hebert
System Administrator III

Freeipa-users mailing list

Freeipa-users mailing list

Reply via email to