<div>Hello</div><div><br></div><div>Please help me troubleshot this following issue, thank you in advance!</div><div><br></div><div>Some rhel6.2 have problem with authenticating against IPA v2.2 </div><div>while some others on same domain do not have issue but still get the same error "Failed to init credentials: Realm not local to KDC"</div>
<div><br></div><div><div>hostname of client that work = mtl-vdi02d.cnppd.lab</div><div><div>hostname of client that does not work = mtl-vdi08d.cnppd.lab</div></div><div>all vm on RHEV</div><div><br></div><div>ipa server (mtl-ipa01d.unix.cnppd.lab) is on unix.cnppd.lab because we have AD</div>
<div>ip client are on cnppd.lab</div><div>Windows machine are also on cnppd.lab connected to "Active directory" </div></div><div><br></div><div>so we have a stub that redirect request for unix.cnppd.lab onto our ipa </div>
<div><br></div><div>client can resolve ipa and vice versa</div><div><br></div><div><div><div>[root@mtl-vdi08d log]# nslookup mtl-ipa01d.unix.cnppd.lab</div><div>Server: 165.115.58.16</div><div>Address: 165.115.58.16#53</div>
<div><br></div><div>Non-authoritative answer:</div><div>Name: mtl-ipa01d.unix.cnppd.lab</div><div>Address: 165.115.118.21</div><div><br></div><div>[root@mtl-vdi08d log]# nslookup unix.cnppd.lab</div><div>Server: 165.115.58.16</div>
<div>Address: 165.115.58.16#53</div><div><br></div><div>Non-authoritative answer:</div><div>Name: unix.cnppd.lab</div><div>Address: 165.115.118.21</div><div><br></div><div>[root@mtl-vdi08d log]# cat /etc/resolv.conf</div>
<div># Generated by NetworkManager</div><div>domain cnppd.lab</div><div>search cnppd.lab <a href="http://cn.ca">cn.ca</a></div><div>nameserver 165.115.58.16</div></div></div><div><br></div><div><br></div><div><br></div><div>
we all get this message in our logs</div><div><br></div><div>(Tue Jan 15 17:11:46 2013) [[sssd[ldap_child[1943]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div><div>(Tue Jan 15 17:11:46 2013) [[sssd[ldap_child[1944]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div>
<div>(Tue Jan 15 17:11:46 2013) [[sssd[ldap_child[1945]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div><div>(Tue Jan 15 17:11:46 2013) [[sssd[ldap_child[1946]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div>
<div>(Tue Jan 15 17:11:46 2013) [[sssd[ldap_child[1947]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div><div>(Tue Jan 15 17:12:55 2013) [[sssd[ldap_child[1954]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div>
<div>(Tue Jan 15 17:12:55 2013) [[sssd[ldap_child[1955]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div><div>(Tue Jan 15 17:12:56 2013) [[sssd[ldap_child[1956]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div>
<div>(Tue Jan 15 17:12:56 2013) [[sssd[ldap_child[1957]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div><div>(Tue Jan 15 17:12:56 2013) [[sssd[ldap_child[1958]]]] [ldap_child_get_tgt_sync] (0): Failed to init credentials: Realm not local to KDC</div>
<div><br></div><div><br></div><div>while I can reinstall ipa-client on mtl-vdi02d and it will still work</div><div><br></div><div>if I do the same with mtl-vdi08d, it will still not work</div><div><br></div><div><br></div>
<div><div><br></div></div><div><br></div><div><div>[root@mtl-vdi08d ~]# ipa-client-install --server=mtl-ipa01d.unix.cnppd.lab --domain=UNIX.CNPPD.LAB --mkhomedir</div><div>Discovery was successful!</div><div>Hostname: mtl-vdi08d.cnppd.lab</div>
<div>Realm: UNIX.CNPPD.LAB</div><div>DNS Domain: UNIX.CNPPD.LAB</div><div>IPA Server: mtl-ipa01d.unix.cnppd.lab</div><div>BaseDN: dc=unix,dc=cnppd,dc=lab</div><div><br></div><div><br></div><div>Continue to configure the system with these values? [no]: yes</div>
<div>User authorized to enroll computers: admin</div><div>Synchronizing time with KDC...</div><div>Password for admin@UNIX.CNPPD.LAB:</div><div><br></div><div>Enrolled in IPA realm UNIX.CNPPD.LAB</div><div>Created /etc/ipa/default.conf</div>
<div>Configured /etc/sssd/sssd.conf</div><div>Configured /etc/krb5.conf for IPA realm UNIX.CNPPD.LAB</div><div>SSSD enabled</div><div>Unable to find 'admin' user with 'getent passwd admin'!</div><div>Recognized configuration: SSSD</div>
<div>NTP enabled</div><div>Client configuration complete.</div><div>[root@mtl-vdi08d ~]#</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div>see the "Unable to find 'admin' user with 'getent passwd admin'!" message</div>
<div><br></div><div><div><div>[root@mtl-vdi08d log]# getent passwd t154793</div><div>[root@mtl-vdi08d log]#</div></div></div><div><br></div><div><br></div><div><div>[root@mtl-vdi02d t154793]# getent passwd t154793</div><div>
t154793:*:1947600004:1947600004:Sylvain Angers:/home/t154793:/bin/bash</div><div>[root@mtl-vdi02d t154793]#</div></div><div><br></div><div><br></div><div>What could be the cause?</div><div>Any assistance would be appreciate </div>
<div><br></div><div>Thank you!</div><div><br></div><div><br></div>-- <br>Sylvain Angers<br>