----- On Sep 7, 2016, at 9:43 AM, Sumit Bose sb...@redhat.com wrote:

> Additionally please check the klist output on the Windows client. It
> should show the host principal of the Linux client
> (host/client.ipa.domain@IPA.DOMAIN). If the principal is there the sshd
> logs on the Linux client with a high debug level might also have some
> hints why GSSAPI authentication failed.

Hmm, no host tickets. Only krbtgt for the domain and LDAP and CIFS principal 
for thc DC's

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to