subject:"\[Freeipa\-users\] Client enrolled but failed to obtain host TGT."

Re: [Freeipa-users] Client enrolled but failed to obtain host TGT.

2016-04-22 Thread Ask Stack

MartinThanks for the reply. tail -f /var/log/krb5kdc.log | grep client1.example.com had nothing during a failed ipa client install and plenty activities during a good install. And sorry, I missed a big piece of information. Debug log showed ipa-getkeytab: ../../../libraries/libldap/extended.c:1

Re: [Freeipa-users] Client enrolled but failed to obtain host TGT.

2016-04-22 Thread Martin Babinsky

On 04/21/2016 11:14 PM, Ask Stack wrote: Half the time ipa-client-install will fail at getting the TGT. Google showed posts like, Bug 845691 – ipa-client-install Failed to obtain host TGT . I reduced _kerberos-master._tcp' '_kerberos-master._ud

[Freeipa-users] Client enrolled but failed to obtain host TGT.

2016-04-21 Thread Ask Stack

Half the time ipa-client-install will fail at getting the TGT. Google showed posts like, Bug 845691 – ipa-client-install Failed to obtain host TGT. I reduced _kerberos-master._tcp' '_kerberos-master._udp' '_kerberos._tcp' '_kerberos._udp' to one server entry only. But it didn't help to reduce t