[Freeipa-users] Kerberos Authentication Failed when following setup instructions

[Dmitri Pal]

John B. Adams wrote:
> Hi
>
> I am keen to try out Free IPA as it would solve a lot of problems for me, I have set up a Fedora 10 machine
> and installed with yum.
>
> I have followed the install instructions, and the (kinit - klist - ipa-finduser) looks OK
> then I go to configure your browser, and put the test domain in
>
> network.negotiate-auth.trusted-uris  .mintra.net
> network.negotiate-auth.delegation-uris  .mintra.net
> network.negotiate-auth.using-native-gsslib true
>   

Make sure that the shell from which you start FF points to the right 
kerberos configuration file. If needed use KRB5_CONFIG env variable to 
point to the krb5.conf.
If it does but you still have a problem then the kerberos log would be 
helpful.
If you do not see anything in the log it would indicate that the request 
does not hit the server. That would mean that the FF is not getting the 
right kerberos configuration.

> Then I do IPA Certificate Authority bit. And configure firefox the refresh
>
> But it still comes up with Kerberos Authentication failed.
>
> my server is called ipa.mintra.net on a private subnet, I have got the /etc/hosts set up right, and I have set the system up as a DNS server looking at itself with ipa.mintra.net with an A record pointing to itself.
>
> I would welcome some help here as I am dead keen to see the interface.
>
> John
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>