El dom, 02-11-2014 a las 19:54 +0100, John Obaterspok escribió:

> I have still not been able to logon to Win7 PC with my IPA user.
> Currently I get "No mapping between account names and security IDs was
> done" when I try to login.

> What I've done is this:
>      1. Created a dns entry for winpc + a host entry in web-ui, 
>      2. On the IPA server I ran "ipa-getkeytab -s <ipa.fqdn> -p
> host/<ipa.fqdn> -e arcfour-hmac -k krb5.keytab.<winpc> -P

> What I'm I suppose to do with the krb5.keytab.<winpc> file? Can't see
> any mention of this?

> On the Win PC I did:
>      1. ksetup /setdomain [REALM NAME]
>      2. ksetup /addkdc [REALM NAME] [ipa.fqdn]
>      3. ksetup /addkpasswd [REALM NAME] [ipa.fqdn]
>      4. ksetup /setcomputerpassword [MACHINE_PASSWORD]
>      5. ksetup /mapuser * *

The keytab is not needed, you just have to generate it to set a password
for the computer.

You are supposed to use the same password in ipa-getkeytab and in the
"ksetup /setcomputerpassword" commands

Loris Santamaria   linux user #70506   xmpp:lo...@lgs.com.ve
Links Global Services, C.A.            http://www.lgs.com.ve
Tel: 0286 952.06.87  Cel: 0414 095.00.10  sip:1...@lgs.com.ve
"If I'd asked my customers what they wanted, they'd have said
a faster horse" - Henry Ford

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project

Reply via email to