HI thanks now i am getting output:
[root@kwtpocpbis01 ~]# getent passwd [email protected] [email protected]:*:1198401206:1198401206:ADM Ben George:/home/ kwttestdc.com/adm-ben.george: [root@kwtpocpbis01 ~]# id [email protected] uid=1198401206([email protected]) gid=1198401206( [email protected]) groups=1198401206([email protected]),1198400512(domain [email protected]),1198401147([email protected] ),1198401151([email protected]),1198401148( [email protected]),1198401152( [email protected]),1198401146( [email protected]),1198401150( [email protected]),1198401144( [email protected]),1198401145( [email protected]),1198401149( [email protected]),535600004(ad_admins),1198400513(domain [email protected]) i was trying the kinit command on solaris . -C key is not there Thanks & Regards, Ben On Tue, Jan 6, 2015 at 8:18 PM, Sumit Bose <[email protected]> wrote: > On Tue, Jan 06, 2015 at 08:13:17PM +0300, Ben .T.George wrote: > > HI > > > > thanks for the replay. > > > > please find below output.it's asking for password and accepting that. > but > > something wrong > > > > [root@kwtpocpbis01 ~]# kinit -C [email protected] > > Password for [email protected]: > > > > [root@kwtpocpbis01 ~]# getent passwd adm-ben.george > > Please try > > getent passwd [email protected] > > We use fully-qualified names to avoid name collisions. > > Does the kvno command work? > > bye, > Sumit > > > > > [root@kwtpocpbis01 ~]# id adm-ben.george > > id: adm-ben.george: no such user > > > > Regards, > > Ben > > > > On Tue, Jan 6, 2015 at 8:03 PM, Sumit Bose <[email protected]> wrote: > > > > > On Tue, Jan 06, 2015 at 07:52:20PM +0300, Ben .T.George wrote: > > > > Hi > > > > > > > > I Tried on IPA server and below is my output: > > > > > > > > [root@kwtpocpbis01 ~]# kinit [email protected] > > > > Password for [email protected]: > > > > kinit: KDC reply did not match expectations while getting initial > > > > credentials > > > > > > > > how can i troubleshot this issue.? > > > > > > The argument to kinit is a Kerberos principal which is handled > > > case-sensitive by kinit. To get around the error message either use > > > > > > kinit -C [email protected] > > > > > > or > > > > > > kinit [email protected] > > > > > > (typically the realm part is upper-case, if your user name contains > > > upper-case letters as well you should use them here as well, if you > > > don't know 'kinit -C' might be the better solution) > > > > > > HTH > > > > > > bye, > > > Sumit > > > > > > > > Thanks & Regards, > > > > Ben > > > > > > > > > > > > On Tue, Jan 6, 2015 at 6:41 PM, Sumit Bose <[email protected]> wrote: > > > > > > > > > On Tue, Jan 06, 2015 at 07:19:15AM -0700, Rich Megginson wrote: > > > > > > On 01/05/2015 08:35 PM, Ben .T.George wrote: > > > > > > > > > > > > > >Hi LIst, > > > > > > > > > > > > > >how to check IPA <-> Active directory trust relationship . i > just > > > want > > > > > to > > > > > > >confirm my ipa server is working fine. > > > > > > > > > > > > On an IPA server or client machine: > > > > > > $ kinit [email protected] > > > > > > Password: aduserpassword > > > > > > > > > > > > If there are no AD users yet, you can try with > > > > > [email protected] > > > > > > assuming you have the AD admin password. > > > > > > > > > > Additionally you have to check if the AD user can get a ticket for > an > > > IPA > > > > > service e.g. after calling kinit with the AD user call > > > > > > > > > > kvno ldap/[email protected] > > > > > > > > > > bye, > > > > > Sumit > > > > > > > > > > > > > > > > > > > > > > > > >Regards, > > > > > > >Ben > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > Manage your subscription for the Freeipa-users mailing list: > > > > > > https://www.redhat.com/mailman/listinfo/freeipa-users > > > > > > Go To http://freeipa.org for more info on the project > > > > > > > > > > -- > > > > > Manage your subscription for the Freeipa-users mailing list: > > > > > https://www.redhat.com/mailman/listinfo/freeipa-users > > > > > Go To http://freeipa.org for more info on the project > > > > > > > > >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
