On Thu, 2015-03-26 at 15:42 +0530, Yogesh Sharma wrote: > Hi, > > We are getting error while trying to ssh using users created in IPA > server. > > root@yogesh-ubuntu-pc:~# ssh -vvv [email protected]
You should use the machine's fully qualified name if you want to login using GSSAPI/Krb5, an IP address cannot be resolved to a proper key as keys are registerd into the KDC as host/machine.fully.qualified.name@REALM. It's the same thing as with HTTPS, the client need to know the "name" of the server in order to be able to properly communicate with it. Simo. -- Simo Sorce * Red Hat, Inc * New York -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
