<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 28/06/12 06:52, Sumit Bose wrote: > On Wed, Jun 27, 2012 at 10:35:00PM +0100, Dale Macartney wrote: >> > Evening all > > I have just updated my local RHEL 6 repositories from 6.2 to 6.3 and > installed a new ipa server in a test network. > > I get the following errors now despite having a valid tgt. This worked > perfectly a few hours ago (before I updated the repos) > > [root@ds01 ~]# date > Wed Jun 27 22:31:01 BST 2012 > [root@ds01 ~]# kinit admin > Password for <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a>: > [root@ds01 ~]# klist > Ticket cache: <a class="moz-txt-link-freetext" href="FILE:/tmp/krb5cc_0">FILE:/tmp/krb5cc_0</a> > Default principal: <a class="moz-txt-link-abbreviated" href="mailto:admin@EXAMPLE.COM">admin@EXAMPLE.COM</a> > > Valid starting Expires Service principal > 06/27/12 22:31:06 06/28/12 22:31:04 <a class="moz-txt-link-abbreviated" href="mailto:krbtgt/EXAMPLE.COM@EXAMPLE.COM">krbtgt/EXAMPLE.COM@EXAMPLE.COM</a> > [root@ds01 ~]# date > Wed Jun 27 22:31:10 BST 2012 > [root@ds01 ~]# > [root@ds01 ~]# > [root@ds01 ~]# ipa user-find > ipa: ERROR: Local error: SASL(-1): generic failure: GSSAPI Error: > Unspecified GSS failure. Minor code may provide more information > (Ticket not yet valid) > [root@ds01 ~]# > > > Please check if there are some old tickets which might bestill used by > > apache. Run > > > find /tmp/systemd-namespace-* -name krb5cc_48 > > > (assuming your apache user has uid 48), delete the files listed here and > > try ipa user-find again. > > > HTH > > > bye, > > Sumit > > Thanks Sumit, Despite having this issue for a good while last night. I finished up for the night and it is no longer present this morning. I'll give your suggestion a try if the problem comes back. Dale > > Has something changes from 6.2 to 6.3 that would cause this by any chance? > > thanks > > Dale > > >> > >> pub 4096R/B5B41FAA 2010-11-27 Dale Macartney <a class="moz-txt-link-rfc2396E" href="mailto:dbmacartney@gmail.com"><dbmacartney@gmail.com></a> >> uid Dale Macartney <a class="moz-txt-link-rfc2396E" href="mailto:dale.macartney@bskyb.com"><dale.macartney@bskyb.com></a> >> uid Dale Macartney <a class="moz-txt-link-rfc2396E" href="mailto:dale@themacartneyclan.com"><dale@themacartneyclan.com></a> >> sub 4096R/CF50A682 2010-11-27 [verfällt: 2012-11-26] > > >> _______________________________________________ >> Freeipa-users mailing list >> <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> >> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a> > > _______________________________________________ > Freeipa-users mailing list > <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> > <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</a> iQIcBAEBAgAGBQJP7BM4AAoJEAJsWS61tB+qWUUP/iQHr2cdgnYMbQOkwP5u4Ddy CinIb8sWtKbBDdcNAULJqTfsD+juncGI+Hf/9Mig8hQ/OTsq6fjGBQN804TTQHPL ALkoUoeX7KHKsU40D5H1OltELv/z5/8L9cd3RXHel+1n7TcSSpCDVgVmOVK/mgBh Bxc5DkJ/FwEdkD9zzAZuhRmtCCcXluPtwtwegz8I31jxUN+BOH1c4OzYRnOhkPe8 O9onckphtJ0UsB29DYxuj0TNVfYOmw7xRIW+otUYmva7V5UZhRTjaBTt284Cnq2S 6ZV9fikOkzBEbD+CSHT7lzAsP68vgmoSJVLDD9CwTN4hgmCe8T5vbN+ZblfC5+08 rt/rkbLWBwcf/iptYAOkAW080/HnX0gA4SAfEIESw+bqIO36XyFmRSDucnUACX/R wU2X3adYeUDBy4xSOU8Fls25X0JKbpCShS9nsYcjMtRjXB6AcRwWq2RtozEN0vnK 0Ba3BgFoMZfRVvTdMCXc/HdqnokjGav4igKOkMu6RMi5hBqPYkwr9So1yTTVObro bwjDVwyYb0DgZm6UVnPq0/ih0T7PcXxEnlKnU58x2nJy9TMWGJocPbQSwbbhpmy5 4Gf7zB5MafzOF82xuVFYUOhN1jWIJ5uhDzO2UPAxcViCucnKwV++0zfskRWOEvzE IJ5DTfLgE/gSf39DVRIx =u4eN -----END PGP SIGNATURE----- </body> </html>