<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Yes Jakub...That was the issue. We have fixed it and update to List.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Thanks Jakub.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Would like to have one suggestion. </div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">We have implemented sudo, but every time we need to restart sssd to take the changes. We have try implementing the cache timeout also, but not working as expected.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Any other config changes required?</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><i style="font-size:12.8000001907349px"><span style="font-family:verdana,sans-serif">Best Regards,</span></i><br></div><div dir="ltr"><div style="font-size:12.8000001907349px"><div><i><span style="font-family:verdana,sans-serif">__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-size:12.8000001907349px;font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in/" target="_blank">www.initd.in</a> </span></i></span><br></div><div dir="ltr"><span style="font-size:12.8000001907349px;font-family:verdana,sans-serif"><i><span style="color:rgb(0,0,0)"><br></span></i></span></div><div><span style="font-size:12.8000001907349px;font-family:verdana,sans-serif"><i><span style="color:rgb(0,0,0)">RHCE, VCE-CIA, RACKSPACE CLOUD U Certified</span></i></span></div><div dir="ltr"><br></div><div dir="ltr"><a href="https://www.fb.com/yks0000" target="_blank"><img src="http://i.imgbox.com/ojTDSuw0.gif" alt=""></a> <a href="http://in.linkedin.com/in/yks0000" target="_blank"><img src="http://i.imgbox.com/fHLDBlyz.gif"></a> <a href="https://twitter.com/checkwithyogesh" target="_blank"><img src="http://i.imgbox.com/vTX3eOJ5.gif"></a> <a href="http://google.com/+YogeshSharmaOnGooglePlus" target="_blank"><img src="http://i.imgbox.com/W2bQouRN.gif"></a></div></div></div></div></div></div></div></div></div> <br><div class="gmail_quote">On Tue, Aug 11, 2015 at 9:21 PM, Jakub Hrozek <span dir="ltr"><<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, Aug 11, 2015 at 08:43:49PM +0530, Yogesh Sharma wrote:<br> > Hi Team,<br> ><br> > While registering to IPA Server we are getting below error. Any suggestion<br> > Please.<br> ><br> > [root@client ~]# ipa-client-install --mkhomedir --no-ntp<br> > Discovery was successful!<br> > Hostname: <a href="http://client.domain.int" rel="noreferrer" target="_blank">client.domain.int</a><br> > Realm: domain.INT<br> > DNS Domain: <a href="http://domain.int" rel="noreferrer" target="_blank">domain.int</a><br> > IPA Server: <a href="http://ldap.domain.int" rel="noreferrer" target="_blank">ldap.domain.int</a><br> > BaseDN: dc=domain,dc=int<br> ><br> > Continue to configure the system with these values? [no]: yes<br> > User authorized to enroll computers: admin<br> > Synchronizing time with KDC...<br> > Unable to sync time with IPA NTP server, assuming the time is in sync.<br> > Please check that 123 UDP port is opened.<br> > Password for admin@domain.INT:<br> > Enrolled in IPA realm domain.INT<br> > Attempting to get host TGT...<br> > Created /etc/ipa/default.conf<br> > New SSSD config will be created<br> > Configured sudoers in /etc/nsswitch.conf<br> > Configured /etc/sssd/sssd.conf<br> > Configured /etc/krb5.conf for IPA realm domain.INT<br> > trying <a href="https://ldap.domain.int/ipa/xml" rel="noreferrer" target="_blank">https://ldap.domain.int/ipa/xml</a><br> > Forwarding 'env' to server u'<a href="https://ldap.domain.int/ipa/xml" rel="noreferrer" target="_blank">https://ldap.domain.int/ipa/xml</a>'<br> > Traceback (most recent call last):<br> > File "/usr/sbin/ipa-client-install", line 2567, in <module><br> > sys.exit(main())<br> > File "/usr/sbin/ipa-client-install", line 2553, in main<br> > rval = install(options, env, fstore, statestore)<br> > File "/usr/sbin/ipa-client-install", line 2346, in install<br> > remote_env = api.Command['env'](server=True)['result']<br> > File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in<br> > __call__<br> > ret = self.run(*args, **options)<br> > File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 1076, in<br> > run<br> > return self.forward(*args, **options)<br> > File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 772, in<br> > forward<br> > return self.Backend.xmlclient.forward(<a href="http://self.name" rel="noreferrer" target="_blank">self.name</a>, *args, **kw)<br> > File "/usr/lib/python2.6/site-packages/ipalib/rpc.py", line 731, in<br> > forward<br> > raise error(message=e.faultString)<br> > ipalib.errors.ACIError: Insufficient access: SASL(-1): generic failure:<br> > GSSAPI Error: Unspecified GSS failure. Minor code may provide more<br> > information (Ticket not yet valid)<br> ~~~~~~~~~~~~~~~~~~~~<br> Check the time on your machines..<br> <span class="HOEnZb"><font color="#888888"><br> --<br> Manage your subscription for the Freeipa-users mailing list:<br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br> </font></span></blockquote></div><br></div>