<div dir="ltr">So I've completed the setup, and can see the trust on the Windows side.<div><br></div><div>I've joined a client to the IPA realm, and can login with a IPA user. When I try to login (console, ssh, su -) as a domain user I get:</div> <div><br></div><div>--------CLIENT SIDE--------</div><div><br></div><div><div>[root@rhel6-client ~]# su - sdainard@miovision</div><div>su: user sdainard@miovision does not exist</div><div>[root@rhel6-client ~]# su - sdainard@MIOVISION.CORP</div> <div>su: user sdainard@MIOVISION.CORP does not exist</div><div>[root@rhel6-client ~]# su - sdainard@miovision.corp<br></div><div>su: user sdainard@miovision.corp does not exist</div></div><div><br></div><div><br></div><div> <div>[root@rhel6-client ~]# ssh sdainard@miovision@localhost</div><div>sdainard@miovision@localhost's password: <br></div><div>Permission denied, please try again.</div></div><div><br></div><div><br></div><div>/var/log/secure:</div> <div><div><div>Feb 6 10:13:06 rhel6 sshd[2435]: pam_unix(sshd:auth): check pass; user unknown</div><div>Feb 6 10:13:06 rhel6 sshd[2435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost </div> <div>Feb 6 10:13:09 rhel6 sshd[2435]: pam_succeed_if(sshd:auth): error retrieving information about user sdainard@miovision</div><div>Feb 6 10:13:10 rhel6 sshd[2435]: Failed password for invalid user sdainard@miovision from ::1 port 47391 ssh2</div> <div>Feb 6 10:13:20 rhel6 sshd[2436]: Connection closed by ::1</div><div>Feb 6 10:13:25 rhel6 sshd[2709]: Invalid user sdainard@miovision from ::1</div><div>Feb 6 10:13:25 rhel6 sshd[2710]: input_userauth_request: invalid user sdainard@miovision</div> <div>Feb 6 10:13:36 rhel6 sshd[2709]: pam_unix(sshd:auth): check pass; user unknown</div><div>Feb 6 10:13:36 rhel6 sshd[2709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost </div> <div>Feb 6 10:13:38 rhel6 sshd[2709]: pam_succeed_if(sshd:auth): error retrieving information about user sdainard@miovision</div><div>Feb 6 10:13:40 rhel6 sshd[2709]: Failed password for invalid user sdainard@miovision from ::1 port 47417 ssh2</div> </div><div><br></div></div><div><div>No logs for sssd;</div><div># pwd</div><div>/var/log/sssd</div><div>[root@snapshot-test sssd]# ll</div><div> total 0</div><div>-rw-------. 1 root root 0 Feb 5 17:38 krb5_child.log</div><div>-rw-------. 1 root root 0 Feb 5 17:38 ldap_child.log</div><div>-rw-------. 1 root root 0 Feb 5 17:37 sssd.log</div><div>-rw-------. 1 root root 0 Feb 5 17:38 sssd_miolinux.corp.log</div> <div>-rw-------. 1 root root 0 Feb 5 17:38 sssd_nss.log</div><div>-rw-------. 1 root root 0 Feb 5 17:38 sssd_pac.log</div><div>-rw-------. 1 root root 0 Feb 5 17:38 sssd_pam.log</div><div>-rw-------. 1 root root 0 Feb 5 17:38 sssd_ssh.log</div> </div><div><br></div><div>/etc/sssd/sssd.conf:</div><div><div>[domain/miolinux.corp]</div><div><br></div><div>cache_credentials = True</div><div>krb5_store_password_if_offline = True</div><div>ipa_domain = miolinux.corp</div> <div>id_provider = ipa</div><div>auth_provider = ipa</div><div>access_provider = ipa</div><div>ipa_hostname = rhel6-client.miolinux.corp</div><div>chpass_provider = ipa</div><div>ipa_server = _srv_, ipa1.miolinux.corp</div> <div>ldap_tls_cacert = /etc/ipa/ca.crt</div><div>[sssd]</div><div>services = nss, pam, ssh</div><div>config_file_version = 2</div><div><br></div><div>domains = miolinux.corp</div><div>[nss]</div><div><br></div><div>[pam]</div> <div><br></div><div>[sudo]</div><div><br></div><div>[autofs]</div><div><br></div><div>[ssh]</div><div><br></div><div>[pac]</div></div><div><br></div><div><br></div><div><br></div><div>/etc/ipa/default.conf</div><div><div> #File modified by ipa-client-install</div><div><br></div><div>[global]</div><div>basedn = dc=miolinux,dc=corp</div><div>realm = MIOLINUX.CORP</div><div>domain = miolinux.corp</div><div>server = ipa1.miolinux.corp</div><div> xmlrpc_uri = <a href="https://ipa1.miolinux.corp/ipa/xml">https://ipa1.miolinux.corp/ipa/xml</a></div><div>enable_ra = True</div></div><div><br></div><div><br></div><div>------------ IPA SERVER SIDE --------------</div><div> /var/log/dirsrv/slapd-MIOLINUX-CORP/access<br></div><div>* no new entries *</div><div><br></div><div><div>/var/log/dirsrv/slapd-MIOLINUX-CORP/errors<br></div><div>* no new entries *</div></div><div><br></div><div>/var/log/krb5kdc.log when I attempt to su - sdainard@miovision</div> <div><br></div><div><div>Feb 06 10:08:25 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:08:25 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699305, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:08:26 ipa1.miolinux.corp krb5kdc[7689](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699305, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:08:26 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:08:26 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699306, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:08:27 ipa1.miolinux.corp krb5kdc[7688](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699306, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:08:27 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:08:27 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699307, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:08:27 ipa1.miolinux.corp krb5kdc[7690](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699307, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:08:28 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:08:28 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699308, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:08:28 ipa1.miolinux.corp krb5kdc[7689](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699308, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> </div><div><br></div><div><br></div><div>/var/logkrb5kdc.log when I attempt ssh:</div><div><br></div><div><div>Feb 06 10:13:21 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:21 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699601, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:22 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699601, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:22 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:22 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699602, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:23 ipa1.miolinux.corp krb5kdc[7690](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699602, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:23 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:23 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699603, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:24 ipa1.miolinux.corp krb5kdc[7688](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699603, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:24 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:24 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699604, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:25 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699604, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:25 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: UNKNOWN_SERVER: authtime 0, sdainard@MIOVISION.CORP for host/localhost@MIOLINUX.CORP, Server not found in Kerberos database</div> <div>Feb 06 10:13:25 ipa1.miolinux.corp krb5kdc[7687](info): closing down fd 10</div><div>Feb 06 10:13:25 ipa1.miolinux.corp krb5kdc[7689](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: UNKNOWN_SERVER: authtime 0, sdainard@MIOVISION.CORP for host/localhost@MIOLINUX.CORP, Server not found in Kerberos database</div> <div>Feb 06 10:13:25 ipa1.miolinux.corp krb5kdc[7689](info): closing down fd 10</div><div>Feb 06 10:13:26 ipa1.miolinux.corp krb5kdc[7690](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: UNKNOWN_SERVER: authtime 0, sdainard@MIOVISION.CORP for host/localhost@MIOLINUX.CORP, Server not found in Kerberos database</div> <div>Feb 06 10:13:26 ipa1.miolinux.corp krb5kdc[7690](info): closing down fd 10</div><div>Feb 06 10:13:30 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:30 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699610, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:30 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699610, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:31 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:31 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699611, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:31 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699611, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:32 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:32 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699612, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:32 ipa1.miolinux.corp krb5kdc[7689](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699612, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:32 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:32 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699612, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:33 ipa1.miolinux.corp krb5kdc[7690](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699612, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:33 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:33 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699613, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:34 ipa1.miolinux.corp krb5kdc[7688](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699613, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:34 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:34 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699614, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:34 ipa1.miolinux.corp krb5kdc[7689](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699614, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:34 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:34 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699614, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:35 ipa1.miolinux.corp krb5kdc[7688](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699614, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:35 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:35 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699615, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:36 ipa1.miolinux.corp krb5kdc[7689](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699615, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:36 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:36 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699616, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:36 ipa1.miolinux.corp krb5kdc[7688](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699616, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:36 ipa1.miolinux.corp krb5kdc[7687](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:36 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699616, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:37 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699616, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:37 ipa1.miolinux.corp krb5kdc[7690](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:37 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699617, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:38 ipa1.miolinux.corp krb5kdc[7690](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699617, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> <div>Feb 06 10:13:38 ipa1.miolinux.corp krb5kdc[7689](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: NEEDED_PREAUTH: host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP, Additional pre-authentication required</div> <div>Feb 06 10:13:38 ipa1.miolinux.corp krb5kdc[7688](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699618, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for krbtgt/MIOLINUX.CORP@MIOLINUX.CORP</div> <div>Feb 06 10:13:38 ipa1.miolinux.corp krb5kdc[7687](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.0.6.239">10.0.6.239</a>: ISSUE: authtime 1391699618, etypes {rep=18 tkt=18 ses=18}, host/rhel6-client.miolinux.corp@MIOLINUX.CORP for ldap/ipa1.miolinux.corp@MIOLINUX.CORP</div> </div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><span style="font-family:arial,sans-serif;font-size:16px"><strong>Steve Dainard </strong></span><span style="font-size:12px"></span><br> <span style="font-family:arial,sans-serif;font-size:12px">IT Infrastructure Manager<br> <a href="http://miovision.com/" target="_blank">Miovision</a> | <em>Rethink Traffic</em><br> 519-513-2407 ex.250<br> 877-646-8476 (toll-free)<br> <br> <strong style="font-family:arial,sans-serif;font-size:13px;color:#999999"><a href="http://miovision.com/blog" target="_blank">Blog</a> | </strong><font color="#999999" style="font-family:arial,sans-serif;font-size:13px"><strong><a href="https://www.linkedin.com/company/miovision-technologies" target="_blank">LinkedIn</a> | <a href="https://twitter.com/miovision" target="_blank">Twitter</a> | <a href="https://www.facebook.com/miovision" target="_blank">Facebook</a></strong></font> </span> <hr style="font-family:arial,sans-serif;font-size:13px;color:#333333;clear:both"> <div style="color:#999999;font-family:arial,sans-serif;font-size:13px;padding-top:5px"> <span style="font-family:arial,sans-serif;font-size:12px">Miovision Technologies Inc. | 148 Manitou Drive, Suite 101, Kitchener, ON, Canada | N2C 1L3</span><br> <span style="font-family:arial,sans-serif;font-size:12px">This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.</span></div> </div></div> <br><br><div class="gmail_quote">On Wed, Feb 5, 2014 at 5:30 PM, Steve Dainard <span dir="ltr"><<a href="mailto:sdainard@miovision.com" target="_blank">sdainard@miovision.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div>I didn't have the firewall on my IPA server down while forming the trust. All seems to be working now.</div><div><br></div><div>Thanks for your help.</div> <div><br></div><div>Steve</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"> <span><font color="#888888"><br><span class="HOEnZb"><font color="#888888"> <br> -- <br> / Alexander Bokovoy<br> </font></span></font></span></blockquote></div><br></div></div> </blockquote></div><br></div>