[Freeipa-users] Re: Manual client configuration

2017-10-13 Thread Mark Haney via FreeIPA-users
On 10/13/2017 11:23 AM, Rob Crittenden wrote: The kvno should match that of the keytab. If not you'll need to regenerate it. Note that by default ipa-getkeytab generates new keys every time it is executed. rob Addendum to my previous reply.  I /can/ 'kinit mark.haney' and supply my

[Freeipa-users] Re: Manual client configuration

2017-10-13 Thread Rob Crittenden via FreeIPA-users
Mark Haney wrote: On 10/13/2017 09:48 AM, Mark Haney wrote: I tried changing HOST/ to host/ and got this: Certificate at same location is already used by request with nickname "20171013123749" Seems it doesn't matter on this setup. Oh, probably should mention this is a CentOS 6.9 box. In case

[Freeipa-users] Re: Manual client configuration

2017-10-13 Thread Mark Haney via FreeIPA-users
On 10/13/2017 09:48 AM, Mark Haney wrote: I tried changing HOST/ to host/ and got this: Certificate at same location is already used by request with nickname "20171013123749" Seems it doesn't matter on this setup.  Oh, probably should mention this is a CentOS 6.9 box. In case that matters.

[Freeipa-users] Re: Manual client configuration

2017-10-13 Thread Mark Haney via FreeIPA-users
On 10/13/2017 09:17 AM, Rob Crittenden wrote: Mark Haney via FreeIPA-users wrote: I'm pretty sure ya'll are tired of my stupid questions, but I've got that new Geek smell with regards to IPA, and definitely with manual configuration.  This should be easy to answer.  I've got all the necessaries

[Freeipa-users] Re: Manual client configuration

2017-10-13 Thread Mark Haney via FreeIPA-users
On 10/13/2017 09:00 AM, Mark Haney wrote: I'm pretty sure ya'll are tired of my stupid questions, but I've got that new Geek smell with regards to IPA, and definitely with manual configuration.  This should be easy to answer.  I've got all the necessaries manually setup and I'm at the step to

[Freeipa-users] Re: Manual client configuration

2017-10-13 Thread Rob Crittenden via FreeIPA-users
Mark Haney via FreeIPA-users wrote: I'm pretty sure ya'll are tired of my stupid questions, but I've got that new Geek smell with regards to IPA, and definitely with manual configuration. This should be easy to answer. I've got all the necessaries manually setup and I'm at the step to get the