FreeIPA Server:  Fedora 16, freeipa 2.1.4
Latest CentOS 6.5 client

When running:

ipa-client-install --mkhomedir --enable-dns-updates

The install fails with:

trying https://<server-name>/ipa/xml
Forwarding 'env' to server u'https://<server-name>/ipa/xml'
Traceback (most recent call last):
  File "/usr/sbin/ipa-client-install", line 2377, in <module>
  File "/usr/sbin/ipa-client-install", line 2363, in main
    rval = install(options, env, fstore, statestore)
  File "/usr/sbin/ipa-client-install", line 2167, in install
    remote_env = api.Command['env'](server=True)['result']
  File "/usr/lib/python2.6/site-packages/ipalib/", line 435, in
    ret =*args, **options)
  File "/usr/lib/python2.6/site-packages/ipalib/", line 1073, in
    return self.forward(*args, **options)
  File "/usr/lib/python2.6/site-packages/ipalib/", line 769, in
    return self.Backend.xmlclient.forward(, *args, **kw)
  File "/usr/lib/python2.6/site-packages/ipalib/", line 736, in
    raise error(message=e.faultString)
ipalib.errors.CCacheError: did not receive Kerberos credentials

In /var/log/ipaclient-install.log:

2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage =
2014-02-06T18:19:53Z DEBUG cert valid True for "CN=<server-name>,O=<domain>"
2014-02-06T18:19:53Z DEBUG handshake complete, peer =
2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server
did not receive Kerberos credentials

Any insights or additional info needed just let me know.  Thank you.


IMPORTANT: This e-mail (including any attachments) is intended for the use 
of the individual or entity to which it is addressed and may contain 
information that is classified, private, or confidential. If the reader of 
this message is not the intended recipient, or the employee or agent 
responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution, or copying of this 
communication is prohibited. If you have received this communication in 
error, please notify us immediately by replying to this e-mail. Thank you.
Freeipa-users mailing list

Reply via email to