Hello,

On 15.8.2014 03:52, Peter Grant wrote:
2014-08-15T11:43:46.434383+10:00 host named[6470]: Failed to init credentials 
(Decrypt integrity check failed)

2014-08-15T11:43:46.434884+10:00 host named[6470]: loading configuration: 
failure

2014-08-15T11:43:46.434991+10:00 host named[6470]: exiting (due to fatal error)

2014-08-15T11:43:47.435187+10:00 host ns-slapd: GSSAPI Error: Unspecified GSS 
failure.  Minor code may provide more information (Cannot contact any KDC for 
realm ‘DOMAIN.COM')

For named issue please follow instructions on
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/NamedCannotStart#a3.FailedtoinitcredentialsorFailedtogetinitialcredentialsDecryptintegritycheckfailedorClientscredentialshavebeenrevoked

It seems that /etc/named.keytab is somehow corrupted or obsolete.

Also, KDC logs in /var/log/krb5kdc.log can tell you more.

I hope that others will add ideas about other errors.

--
Petr^2 Spacek

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Reply via email to