<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hello,<div class=""><br class=""></div><div class="">We’ve been using SSSD with FreeIPA very successfully for a while now - we love it. Recently, we’ve noticed that all our linux hosts (All Ubuntu 14.04) log the following message pretty regularly (several dozen times per day):</div><div class=""><br class=""></div><div class="">"<span style="color: rgb(102, 102, 102); font-family: 'Open Sans', sans-serif; font-size: 11px; white-space: pre-wrap; background-color: rgb(255, 255, 255);" class="">Failed to initialize credentials using keytab [default]: Generic error (see e-text). Unable to create GSSAPI-encrypted LDAP connection.</span><font color="#666666" face="Open Sans, sans-serif" class=""><span style="font-size: 11px; white-space: pre-wrap;" class="">”</span></font></div><div class=""><span style="color: rgb(102, 102, 102); font-family: 'Open Sans', sans-serif; font-size: 11px; white-space: pre-wrap; background-color: rgb(255, 255, 255);" class=""><br class=""></span></div><div class="">Now, outside of this message, we have no symptoms that things aren’t functioning properly. SSSD is properly recognizing changes whenever we update our FreeIPA server. </div><div class=""><br class=""></div><div class="">Can anyone point us in the right direction on how to fix this issue? So far, we’ve done the following:</div><div class=""><br class=""></div><div class="">1. Verified the /etc/krb5.keytab seems to be fine (and it does).</div><div class="">2. Verified that changes to our FreeIPA servers properly get replicated to the clients.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Thanks!</div><div class="">Terence</div></body></html>