<div class="gmail_quote">On Fri, May 16, 2008 at 4:34 PM, Jaakan Shorter <<a href="mailto:jaakanshorter@gmail.com">jaakanshorter@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> I did Clean install of Fedora 9 with in a XEN guest x64_86 static IP yum install ipa-server ipa-server-install --setup-bind -N I got the bind server working correctly with the following <a href="http://www.redhat.com/magazine/025nov06/features/dns/" target="_blank">http://www.redhat.com/magazine/025nov06/features/dns/</a> I got stopped at the test doing a find admin user #ipa-finduser admin Could not initialize GSSAPI: Unspecified GSS failure. Minor code may provide more information/Server not found in Kerberos database # ldapsearch -Y GSSAPI -b "dc=(mydomain),dc=net" uid=admin SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) Troubleshooting Guide Doesn't really help with this issue at all or does "ensure that DNS is configured correctly" in the install Guide. Shouldn't the "--setup-bind" switch take care of configuring the DNS correctly?</blockquote><div> During the install you will see something like "Sample zone file for bind has been created in /tmp/sample.zone.F_uMf4.db" make sure you correctly use this in your zone file in DNS, and check that your fqdn does not resolve to your loopback address </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> I have tryed stuff on this page any no luck <a href="http://tldp.org/HOWTO/Kerberos-Infrastructure-HOWTO/install.html" target="_blank">http://tldp.org/HOWTO/Kerberos-Infrastructure-HOWTO/install.html</a> Jaakan _______________________________________________ Freeipa-devel mailing list <a href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/freeipa-devel" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-devel</a> </blockquote></div> -- Joe Royall Red Hat Certified Architect