<div dir="ltr"><br><div class="gmail_extra">HI</div><div class="gmail_extra"><br></div><div class="gmail_extra">thanks now i am getting output:</div><div class="gmail_extra"><br></div><div class="gmail_extra"><div class="gmail_extra">[root@kwtpocpbis01 ~]# getent passwd <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a></div><div class="gmail_extra">adm-ben.george@kwttestdc.com:*:1198401206:1198401206:ADM Ben George:/home/<a href="http://kwttestdc.com/adm-ben.george">kwttestdc.com/adm-ben.george</a>:</div><div class="gmail_extra">[root@kwtpocpbis01 ~]# id <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a></div><div class="gmail_extra">uid=1198401206(<a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a>) gid=1198401206(<a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a>) groups=1198401206(<a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a>),1198400512(domain <a href="mailto:admins@kwttestdc.com">admins@kwttestdc.com</a>),1198401147(<a href="mailto:wseallowmediaaccess@kwttestdc.com">wseallowmediaaccess@kwttestdc.com</a>),1198401151(<a href="mailto:wsealertadministrators@kwttestdc.com">wsealertadministrators@kwttestdc.com</a>),1198401148(<a href="mailto:wseallowaddinaccess@kwttestdc.com">wseallowaddinaccess@kwttestdc.com</a>),1198401152(<a href="mailto:wseremoteaccessusers@kwttestdc.com">wseremoteaccessusers@kwttestdc.com</a>),1198401146(<a href="mailto:wseallowcomputeraccess@kwttestdc.com">wseallowcomputeraccess@kwttestdc.com</a>),1198401150(<a href="mailto:wseallowhomepagelinks@kwttestdc.com">wseallowhomepagelinks@kwttestdc.com</a>),1198401144(<a href="mailto:wseremotewebaccessusers@kwttestdc.com">wseremotewebaccessusers@kwttestdc.com</a>),1198401145(<a href="mailto:wseallowshareaccess@kwttestdc.com">wseallowshareaccess@kwttestdc.com</a>),1198401149(<a href="mailto:wseallowdashboardaccess@kwttestdc.com">wseallowdashboardaccess@kwttestdc.com</a>),535600004(ad_admins),1198400513(domain <a href="mailto:users@kwttestdc.com">users@kwttestdc.com</a>)</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">i was trying the kinit command on solaris . -C key is not there </div><div class="gmail_extra"><br></div><div class="gmail_extra">Thanks & Regards,</div><div class="gmail_extra">Ben</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_quote">On Tue, Jan 6, 2015 at 8:18 PM, Sumit Bose <span dir="ltr"><<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">On Tue, Jan 06, 2015 at 08:13:17PM +0300, Ben .T.George wrote:<br> > HI<br> ><br> > thanks for the replay.<br> ><br> > please find below <a href="http://output.it" target="_blank">output.it</a>'s asking for password and accepting that. but<br> > something wrong<br> ><br> > [root@kwtpocpbis01 ~]# kinit -C <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a><br> > Password for <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a>:<br> ><br> > [root@kwtpocpbis01 ~]# getent passwd adm-ben.george<br> <br> </span>Please try<br> <br> getent passwd <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a><br> <br> We use fully-qualified names to avoid name collisions.<br> <br> Does the kvno command work?<br> <br> bye,<br> Sumit<br> <div class=""><div class="h5"><br> ><br> > [root@kwtpocpbis01 ~]# id adm-ben.george<br> > id: adm-ben.george: no such user<br> ><br> > Regards,<br> > Ben<br> ><br> > On Tue, Jan 6, 2015 at 8:03 PM, Sumit Bose <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote:<br> ><br> > > On Tue, Jan 06, 2015 at 07:52:20PM +0300, Ben .T.George wrote:<br> > > > Hi<br> > > ><br> > > > I Tried on IPA server and below is my output:<br> > > ><br> > > > [root@kwtpocpbis01 ~]# kinit <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a><br> > > > Password for <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a>:<br> > > > kinit: KDC reply did not match expectations while getting initial<br> > > > credentials<br> > > ><br> > > > how can i troubleshot this issue.?<br> > ><br> > > The argument to kinit is a Kerberos principal which is handled<br> > > case-sensitive by kinit. To get around the error message either use<br> > ><br> > > kinit -C <a href="mailto:adm-ben.george@kwttestdc.com">adm-ben.george@kwttestdc.com</a><br> > ><br> > > or<br> > ><br> > > kinit <a href="mailto:adm-ben.george@KWTTESTDC.COM">adm-ben.george@KWTTESTDC.COM</a><br> > ><br> > > (typically the realm part is upper-case, if your user name contains<br> > > upper-case letters as well you should use them here as well, if you<br> > > don't know 'kinit -C' might be the better solution)<br> > ><br> > > HTH<br> > ><br> > > bye,<br> > > Sumit<br> > > ><br> > > > Thanks & Regards,<br> > > > Ben<br> > > ><br> > > ><br> > > > On Tue, Jan 6, 2015 at 6:41 PM, Sumit Bose <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote:<br> > > ><br> > > > > On Tue, Jan 06, 2015 at 07:19:15AM -0700, Rich Megginson wrote:<br> > > > > > On 01/05/2015 08:35 PM, Ben .T.George wrote:<br> > > > > > ><br> > > > > > >Hi LIst,<br> > > > > > ><br> > > > > > >how to check IPA <-> Active directory trust relationship . i just<br> > > want<br> > > > > to<br> > > > > > >confirm my ipa server is working fine.<br> > > > > ><br> > > > > > On an IPA server or client machine:<br> > > > > > $ kinit <a href="mailto:adusername@ADDOMAIN.COM">adusername@ADDOMAIN.COM</a><br> > > > > > Password: aduserpassword<br> > > > > ><br> > > > > > If there are no AD users yet, you can try with<br> > > > > <a href="mailto:administrator@ADDOMAIN.COM">administrator@ADDOMAIN.COM</a><br> > > > > > assuming you have the AD admin password.<br> > > > ><br> > > > > Additionally you have to check if the AD user can get a ticket for an<br> > > IPA<br> > > > > service e.g. after calling kinit with the AD user call<br> > > > ><br> > > > > kvno ldap/ipaserver.ipa.domain@IPA.DOMAIN<br> > > > ><br> > > > > bye,<br> > > > > Sumit<br> > > > ><br> > > > > ><br> > > > > > ><br> > > > > > >Regards,<br> > > > > > >Ben<br> > > > > > ><br> > > > > > ><br> > > > > ><br> > > > ><br> > > > > > --<br> > > > > > Manage your subscription for the Freeipa-users mailing list:<br> > > > > > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> > > > > > Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br> > > > ><br> > > > > --<br> > > > > Manage your subscription for the Freeipa-users mailing list:<br> > > > > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> > > > > Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br> > > > ><br> > ><br> </div></div></blockquote></div><br><div class="gmail_signature"><div dir="ltr"><div><span style="border-collapse:collapse"><font face="'courier new', monospace" size="1"><font color="#ff9900"><br></font></font></span></div></div></div> </div></div>