Unfortunately no. I don't have access to the server. <div class="gmail_quote">On Feb 10, 2014 2:36 PM, "Dmitri Pal" <<a href="mailto:dpal@redhat.com">dpal@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On 02/08/2014 08:48 AM, Rob Crittenden wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Dave Jablonski wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> FreeIPA Server: Fedora 16, freeipa 2.1.4 Latest CentOS 6.5 client When running: ipa-client-install --mkhomedir --enable-dns-updates The install fails with: trying https://<server-name>/ipa/xml Forwarding 'env' to server u'https://<server-name>/ipa/xml' Traceback (most recent call last): File "/usr/sbin/ipa-client-install", line 2377, in <module> sys.exit(main()) File "/usr/sbin/ipa-client-install", line 2363, in main rval = install(options, env, fstore, statestore) File "/usr/sbin/ipa-client-install", line 2167, in install remote_env = api.Command['env'](server=True)['result'] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 435, in __call__ ret = self.run(*args, **options) File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 1073, in run return self.forward(*args, **options) File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 769, in forward return self.Backend.xmlclient.forward(<a href="http://self.name" target="_blank">self.name</a> <<a href="http://self.name" target="_blank">http://self.name</a>>, *args, **kw) File "/usr/lib/python2.6/site-packages/ipalib/rpc.py", line 736, in forward raise error(message=e.faultString) ipalib.errors.CCacheError: did not receive Kerberos credentials In /var/log/ipaclient-install.log: 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage = SSLServer 2014-02-06T18:19:53Z DEBUG cert valid True for "CN=<server-name>,O=<domain>" 2014-02-06T18:19:53Z DEBUG handshake complete, peer = <a href="http://10.1.1.111:443" target="_blank">10.1.1.111:443</a> <<a href="http://10.1.1.111:443" target="_blank">http://10.1.1.111:443</a>> 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server https://<server-name>/ipa/xml: did not receive Kerberos credentials </blockquote> We need to see more context from the client install log, preferably the whole thing. IPA v2 doesn't support session cookies but the 3.x client should have support for falling back to using TGT delegation. rob _______________________________________________ Freeipa-users mailing list <a href="mailto:Freeipa-users@redhat.com" target="_blank">Freeipa-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> </blockquote> Any chance to upgrade the server to something more modern? -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. ------------------------------- Looking to carve out IT costs? <a href="http://www.redhat.com/carveoutcosts/" target="_blank">www.redhat.com/carveoutcosts/</a> _______________________________________________ Freeipa-users mailing list <a href="mailto:Freeipa-users@redhat.com" target="_blank">Freeipa-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> </blockquote></div> IMPORTANT: This e-mail (including any attachments) is intended for the use of the individual or entity to which it is addressed and may contain information that is classified, private, or confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this communication in error, please notify us immediately by replying to this e-mail. Thank you.