<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px"><div dir="ltr" id="yui_3_16_0_ym19_1_1464026170140_4933">My company's ipa-client-install fail very often. Debug logs show the process always failed at getting the /etc/krb5.keytab .<br></div><div id="yui_3_16_0_ym19_1_1464026170140_5465" dir="ltr">Is there a way to modify the script to increase number of attempts to create /etc/krb5.keytab ?</div><div id="yui_3_16_0_ym19_1_1464026170140_5658" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1464026170140_5545" dir="ltr">I noticed "--kinit-attempts=KINIT_ATTEMPTS, number of attempts to obtain host TGT (defaults to 5)." But it comes after setting up the "/etc/krb5.keytab" file. <br id="yui_3_16_0_ym19_1_1464026170140_5532"></div><div id="yui_3_16_0_ym19_1_1464026170140_5799" dir="ltr">Thanks.<br></div><div id="yui_3_16_0_ym19_1_1464026170140_5498" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1464026170140_5295" dir="ltr">server<br id="yui_3_16_0_ym19_1_1464026170140_5230">ipa-server-3.0.0-47.el6_7.1.x86_64<br id="yui_3_16_0_ym19_1_1464026170140_5231"><br id="yui_3_16_0_ym19_1_1464026170140_5232"></div><div id="yui_3_16_0_ym19_1_1464026170140_5233" dir="ltr">cleint<br id="yui_3_16_0_ym19_1_1464026170140_5219">ipa-client-3.0.0-47.el6_7.2.x86_64<br id="yui_3_16_0_ym19_1_1464026170140_5220">ipa-client-3.0.0-50.el6.1.x86_64<br id="yui_3_16_0_ym19_1_1464026170140_5221"><br></div><div id="yui_3_16_0_ym19_1_1464026170140_5201" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1464026170140_5183" dir="ltr">#SUCCESSFUL ATTEMPT<br id="yui_3_16_0_ym19_1_1464026170140_5103"><br id="yui_3_16_0_ym19_1_1464026170140_5104"></member>\n<br id="yui_3_16_0_ym19_1_1464026170140_5105"></struct></value>\n<br id="yui_3_16_0_ym19_1_1464026170140_5106"></data></array></value>\n<br id="yui_3_16_0_ym19_1_1464026170140_5107"></param>\n<br id="yui_3_16_0_ym19_1_1464026170140_5108"></params>\n<br id="yui_3_16_0_ym19_1_1464026170140_5109"></methodResponse>\n<br id="yui_3_16_0_ym19_1_1464026170140_5110"><br id="yui_3_16_0_ym19_1_1464026170140_5111">Keytab successfully retrieved and stored in: /etc/krb5.keytab<br id="yui_3_16_0_ym19_1_1464026170140_5112">Certificate subject base is: O=TEST.COM<br id="yui_3_16_0_ym19_1_1464026170140_5113"><br id="yui_3_16_0_ym19_1_1464026170140_5114">2016-05-23T14:40:49Z INFO Enrolled in IPA realm TEST.COM<br id="yui_3_16_0_ym19_1_1464026170140_5115">2016-05-23T14:40:49Z DEBUG args=kdestroy<br id="yui_3_16_0_ym19_1_1464026170140_5116">2016-05-23T14:40:49Z DEBUG stdout=<br id="yui_3_16_0_ym19_1_1464026170140_5117">2016-05-23T14:40:49Z DEBUG stderr=<br id="yui_3_16_0_ym19_1_1464026170140_5118"><br id="yui_3_16_0_ym19_1_1464026170140_5119"><br id="yui_3_16_0_ym19_1_1464026170140_5120"><br id="yui_3_16_0_ym19_1_1464026170140_5121">#FAILED ATTEMPT<br id="yui_3_16_0_ym19_1_1464026170140_5122"><br id="yui_3_16_0_ym19_1_1464026170140_5123"></member>\n<br id="yui_3_16_0_ym19_1_1464026170140_5124"></struct></value>\n<br id="yui_3_16_0_ym19_1_1464026170140_5125"></data></array></value>\n<br id="yui_3_16_0_ym19_1_1464026170140_5126"></param>\n<br id="yui_3_16_0_ym19_1_1464026170140_5127"></params>\n<br id="yui_3_16_0_ym19_1_1464026170140_5128"></methodResponse>\n<br id="yui_3_16_0_ym19_1_1464026170140_5129"><br id="yui_3_16_0_ym19_1_1464026170140_5130">ipa-getkeytab: ../../../libraries/libldap/extended.c:177: ldap_parse_extended_result: Assertion `res != ((void *)0)' failed.<br id="yui_3_16_0_ym19_1_1464026170140_5131">Certificate subject base is: O=TEST.COM<br id="yui_3_16_0_ym19_1_1464026170140_5132"><br id="yui_3_16_0_ym19_1_1464026170140_5133">2016-05-23T14:37:08Z INFO Enrolled in IPA realm TEST.COM<br id="yui_3_16_0_ym19_1_1464026170140_5134">2016-05-23T14:37:08Z DEBUG args=kdestroy<br id="yui_3_16_0_ym19_1_1464026170140_5135">2016-05-23T14:37:08Z DEBUG stdout=<br id="yui_3_16_0_ym19_1_1464026170140_5136">2016-05-23T14:37:08Z DEBUG stderr=<br id="yui_3_16_0_ym19_1_1464026170140_5137"><br></div></div></body></html>