<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hi Rob,</span></div><div><span>Client configuration complete.</span></div><div><span>but it says Failed to upload host SSH public keys. Hope it's OK.<br>Thanks a lot,</span></div><div><span>George</span></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"> <div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight: bold;">From:</span></b> Rob Crittenden <rcritten@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> george he <george_he7@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, June 20, 2012 4:24 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] ipa installation problem -- 2<br> </font> </div> <br> george he wrote:<br>> Hello all,<br>><br>> My first problem was related to firewall, the command<br>> iptables -A INPUT -p tcp --dport 80 -j ACCEPT<br>> opened port 80 after this line in iptables thus the problem I had.<br>> REJECT all -- anywhere anywhere reject-with icmp-host-prohibited<br>><br>> Now I have another problem when I run ipa-client-install on the client<br>> (after it asked for admin password):<br>><br>> Joining realm failed: HTTP response code is 400, not 200<br>><br>> Here are the related lines in /var/log/ipaclient-install.log<br>> 2012-06-20T19:46:53Z DEBUG args=/usr/sbin/ipa-join -s<br>> <a target="_blank" href="http://cns2.psych.yale.edu/">cns2.psych.yale.edu</a> -b dc=psych,dc=yale,dc=edu<br>> 2012-06-20T19:46:53Z DEBUG stdout=<br>> 2012-06-20T19:46:53Z DEBUG stderr=HTTP response code is 400, not 200<br>><br>><br><br>Try updating mod_nss to mod_nss.x86_64 0:1.0.8-17.fc17.<br><br>rob<br><br><br> </div> </div> </blockquote></div> </div></body></html>