<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 06/21/2012 11:43 AM, george he wrote:
<blockquote
cite="mid:1340293393.98130.YahooMailNeo@web120006.mail.ne1.yahoo.com"
type="cite">
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255,
255); font-family: times new roman,new york,times,serif;
font-size: 12pt;">
<div><span>Hello Rob,</span></div>
<div><br>
<span></span></div>
<div><span>Here is what I get by running the commands:</span></div>
<div><br>
<span></span></div>
<div><span># klist -kt /etc/krb5.keytab<br>
Keytab name: <a class="moz-txt-link-freetext" href="FILE:/etc/krb5.keytab">FILE:/etc/krb5.keytab</a><br>
KVNO Timestamp Principal<br>
---- -----------------
--------------------------------------------------------<br>
# ipa-rmkeytab -k /etc/krb5.keytab -r MYREALM<br>
realm not found<br>
</span><span># <br>
</span></div>
<div><br>
<span></span></div>
<div><span>I thought the commands didn't solve the problem,
but when I run </span>ipa-client-install again, it says
at the end "Client configuration complete."<br>
</div>
<div>and it was found on the server by "ipa host-find". So I
guess the problem is gone.</div>
<div><br>
</div>
<div>Your help is very appreciated.</div>
<div>George</div>
<div><br>
<blockquote style="border-left: 2px solid rgb(16, 16, 255);
margin-left: 5px; margin-top: 5px; padding-left: 5px;">
<div style="font-family: times new roman,new
york,times,serif; font-size: 12pt;">
<div style="font-family: times new roman,new
york,times,serif; font-size: 12pt;">
<div dir="ltr"> <font size="2" face="Arial">
<hr size="1"> <b><span style="font-weight: bold;">From:</span></b>
Rob Crittenden <a class="moz-txt-link-rfc2396E" href="mailto:rcritten@redhat.com"><rcritten@redhat.com></a><br>
<b><span style="font-weight: bold;">To:</span></b>
george he <a class="moz-txt-link-rfc2396E" href="mailto:george_he7@yahoo.com"><george_he7@yahoo.com></a> <br>
<b><span style="font-weight: bold;">Cc:</span></b>
Petr Viktorin <a class="moz-txt-link-rfc2396E" href="mailto:pviktori@redhat.com"><pviktori@redhat.com></a>;
<a class="moz-txt-link-rfc2396E" href="mailto:freeipa-users@redhat.com">"freeipa-users@redhat.com"</a>
<a class="moz-txt-link-rfc2396E" href="mailto:freeipa-users@redhat.com"><freeipa-users@redhat.com></a> <br>
<b><span style="font-weight: bold;">Sent:</span></b>
Thursday, June 21, 2012 11:18 AM<br>
<b><span style="font-weight: bold;">Subject:</span></b>
Re: [Freeipa-users] Joining realm failed: Host is
already joined<br>
</font> </div>
<br>
george he wrote:<br>
> Thanks Petr,<br>
><br>
> Now it says:<br>
><br>
> Failed to obtain host TGT.<br>
> Installation failed. Rolling back changes.<br>
> I did the manual installation on this machine
when the<br>
> ipa-client-install script failed.<br>
> I guess there's a lot to clean up :(<br>
<br>
/var/log/ipaclient-install.log may have more details
on the failure.<br>
<br>
It could be that you have a lingering host principal.
Run klist -kt <br>
/etc/krb5.keytab. To remove all principals for your
realm from this <br>
keytab run:<br>
<br>
# ipa-rmkeytab -k /etc/krb5.keytab -r YOUR_REALM<br>
<br>
rob<br>
<br>
<br>
</div>
</div>
</blockquote>
</div>
</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
Rob,<br>
<br>
IMO for cases like this we should have a page about "how to wipe
out the client manually".<br>
<br>
In the past I ran the uninstall several times in a row and
sometimes it helped.<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>