On Thu, 2015-03-26 at 15:42 +0530, Yogesh Sharma wrote:
> Hi,
> 
> We are getting error while trying to ssh using users created in IPA
> server.
> 
> root@yogesh-ubuntu-pc:~# ssh -vvv cm8158@52.74.84.94

You should use the machine's fully qualified name if you want to login
using GSSAPI/Krb5, an IP address cannot be resolved to a proper key as
keys are registerd into the KDC as
host/machine.fully.qualified.name@REALM.

It's the same thing as with HTTPS, the client need to know the "name" of
the server in order to be able to properly communicate with it.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to