<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div>Hello,</div><div><br></div><div>I have the unfortunate requirement of needing to authenticate windows XP clients against freeipa.</div><div><br></div><div>I have followed the instuctions of these two guides:</div><div><div>http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Using_Microsoft_Windows.html</div><div><a href="http://freeipa.org/page/Windows_authentication_against_FreeIPA">http://freeipa.org/page/Windows_authentication_against_FreeIPA</a></div></div><div><br></div><div>Kerberos is working, because I can do a kinit username and properly receive a krbtgt principle.</div><div><br></div><div>However on login I get the error "The system could not log you on".</div><div><br></div><div>For the map user step I did "ksetup /mapuser * *" and have a local user created with the same username as the IPA user.</div><div><br></div><div>Is there a step I am missing? I feel as though I am close because kerberos is working.</div><div><br></div><div>I am using FreeIPA 2.2 on RHEL 6.3</div><div><br></div><div>Thanks for any tips.</div><div><br></div><div>Eric</div><div><br></div><BR /> <BR /> Notice of Confidentiality: The information transmitted is intended only for the<br>person or entity to which it is addressed and may contain confidential and/or<br>privileged material. Any review, re-transmission, dissemination or other use of <br>or taking of any action in reliance upon this information by persons or entities<br>other than the intended recipient is prohibited. If you received this in error<br>please contact the sender immediately by return electronic transmission and then<br>immediately delete this transmission including all attachments without copying,<br>distributing or disclosing the same.<BR /> </body></html>