[Freeipa-users] ipa: ERROR: did not receive Kerberos credentials

--from liipaxs010p.ipa2.dc.sita.aero Invalid password ipa-replica-conncheck says communication is ok. I looked at the httpd, secure,and krb log and none show any activity when I execute the commands above. Im lost any clues as to where I can look for answers? Thank You, Rashard Kelly This

Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials

oKtZFE with default princ rkelly@DOMAIN [rkelly@replicahostname ~]$ KRB5_TRACE=/dev/stderr klist klist: Credentials cache permissions incorrect while setting cache flags (ticket cache FILE:/tmp/krb5cc_159910_oKtZFE) -- Thank You, Rashard Kelly From: Alexander Bokovoy To: rasha

Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials

, Rashard Kelly From: rashard.ke...@sita.aero To: Alexander Bokovoy Cc: freeipa-users@redhat.com Date: 04/10/2014 08:42 AM Subject:Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials Sent by:freeipa-users-boun...@redhat.com The krb5 files are not

Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials

- Only targeted network daemons are protected. # strict - Full SELinux protection. SELINUXTYPE=targeted Thank You, Rashard Kelly From: Sumit Bose To: rashard.ke...@sita.aero Cc: freeipa-users@redhat.com Date: 04/10/2014 12:31 PM Subject:Re: [Freeipa-users] ipa

Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials

[root@replicahostname ~]# sestatus SELinux status: disabled [root@replicahostname ~]# audit2why -b -w -t avc [root@replicahostname ~]# Nothing in the audit log after audit2why came back either. Thank You, Rashard Kelly From: Alexander Bokovoy To: rashard.ke

Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials

: Permission denied Thank You, Rashard Kelly SITA Senior Linux Specialist From: Sumit Bose To: rashard.ke...@sita.aero Cc: Alexander Bokovoy , freeipa-users@redhat.com Date: 04/11/2014 09:54 AM Subject:Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials On

Re: [Freeipa-users] ipa: ERROR: did not receive Kerberos credentials (SOLVED)

Thank you so much, it was the user id. There was an account with the same user name leftover from a previous effort. Thanks to everyone for the time. Thank You, Rashard Kelly From: Sumit Bose To: rashard.ke...@sita.aero Cc: Alexander Bokovoy , freeipa-users@redhat.com Date: 04

[Freeipa-users] Postponing IPA 3 upgrade

I was wondering if I need to be concerned about IPA 2 being updated automatically to IPA 3? We have a working IPA 2 environment in place now and wanted to know if IPA needed to be added to an exclude list. We are afraid of breaking our current setup. When IPA 3 is released will yum automaticall

Re: [Freeipa-users] Postponing IPA 3 upgrade

Thanks for all the replies, We are using Red Hat Satellite Server to handle Yum updates but I am still getting a grasp on how it works. After talking to one of our admins, I was told that it should not do a major version upgrade without being explicitly told to. The servers are virtual so I wi

[Freeipa-users] How IPA handles AD computer groups

helpful. Thank You, Rashard Kelly Senior Linux Specialist From: Martin Kosek To: Sumit Bose Cc: freeipa-users@redhat.com Date: 05/31/2013 06:41 AM Subject:Re: [Freeipa-users] IPA & AD trust question Sent by:freeipa-users-boun...@redhat.com On 05/31/2013 09:3

[Freeipa-users] Joining realm failed: SASL Bind failed Local error (-2)

ia dig and took a working DNS config from another server. Everything appears to be setup right. What could I be overlooking? Thank You, Rashard Kelly SITA Senior Linux Specialist From: Dmitri Pal To: Trey Dockendorf Cc: freeipa-users@redhat.com Date: 03/07/2014 05:43 PM Subject:

[Freeipa-users] Joining realm failed: SASL Bind failed Local error (-2)

ia dig and took a working DNS config from another server. Everything appears to be setup right. What could I be overlooking? Thank You, Rashard Kelly SITA Senior Linux Specialist This document is strictly confidential and intended only for use by the addressee unless otherwise stated. If y

Re: [Freeipa-users] Joining realm failed: SASL Bind failed Local error (-2)

mean? Ldap is instslled Thank You, Rashard Kelly This document is strictly confidential and intended only for use by the addressee unless otherwise stated. If you are not the intended recipient, please notify the sender immediately and delete it from your system

Re: [Freeipa-users] Joining realm failed: SASL Bind failed Local error (-2) (SOLVED)

Thanks, after a little digging I found that the reverse DNS records were not configured for the masters. Thank You, Rashard Kelly From: Martin Kosek To: rashard.ke...@sita.aero Cc: freeipa-users@redhat.com Date: 03/10/2014 10:17 AM Subject:Re: [Freeipa-users] Joining

[Freeipa-users] Sudo Rule Command Line Option Arguments

r/bin/yum localinstall example*, /usr/bin/yum localupdate example* Failed members: member sudo command: /usr/bin/yum --disableexcludes=all localinstall example*: no such entry - Number of members added 0 --------- Thank You, R

Re: [Freeipa-users] Sudo Rule Command Line Option Arguments (Solved)

ot;no sudocmd entry defined yet" vs "no such entry" would improve workflow for people stuck using the CMD. Thank You, Rashard Kelly From: Rashard Kelly/Atlanta/SITA/WW To: freeipa-users@redhat.com Date: 03/12/2014 11:47 AM Subject:Sudo Rule Command Line Option Arg

Re: [Freeipa-users] Sudo Rule Command Line Option Arguments (Solved)

I would be happy to open a ticket, where do I go to do that? Thank You, Rashard Kelly From: Rob Crittenden To: rashard.ke...@sita.aero, freeipa-users@redhat.com Date: 03/13/2014 09:52 AM Subject:Re: [Freeipa-users] Sudo Rule Command Line Option Arguments (Solved

[Freeipa-users] Disadantages of using external DNS

What are the disadvantages of using an external DNS source? My three options are install DNS services on the IPA server, use the local Active Directory DNS, or connect to a linux based DNS appliance. Is it common not to use DNS at all if so what are the drawbacks? My goal is consolidating all l

Re: [Freeipa-users] Disadantages of using external DNS

Thank everyone for the ideas. We will be adding the DNS service to the IPA server. This seems like the best solution. Thanks again, Rashard This document is strictly confidential and intended only for use by the addressee unless otherwise stated. If you are not the intended recipient, please