[Freeipa-users] ipa-client-install error

Jimmy g17jimmy at gmail.com
Fri Nov 4 19:20:02 UTC 2011


I don't know if I was clear on the issue- the FreeIPA server is running on
Fedora 15, the client is CentOS 6. If your suggestion still applies I will
look into the SL packages.
Thanks- J

On Fri, Nov 4, 2011 at 3:12 PM, Adam Young <ayoung at redhat.com> wrote:

>  CentOS is far behind RHEL.  Many of the issues you will find have been
> fixed in released versions of IPA.  This one is due, I think to an earlier
> issue with directory server that has since been upgraded.
>
> You might want to see if the versions shipped with Scientifix Linux work
> better for you, but it is going to be quite a few packages.  Aside from
> freeipa*  it will be xmlrpc,  38-ds-base  and DNS dyndb and possibly others.
>
>
>
>
>
>
>
> On 11/04/2011 03:04 PM, Jimmy wrote:
>
> I'm running the ipa-client-install on a CentOS 6 client and get this
> error:
>
>  [root at kudzu ~]# ipa-client-install
> Discovery was successful!
> Realm: PDH.CSP
> DNS Domain: pdh.csp
> IPA Server: csp-idm.pdh.csp
> BaseDN: dc=pdh,dc=csp
>
>  Continue to configure the system with these values? [no]: yes
> Principal: admin
> Password for admin at PDH.CSP:
> Joining realm failed: Operation failed! unsupported extended operation
> child exited with 9
> Certificate subject base is: O=PDH.CSP
>
>  The only logs I see on the server are here:
>
>  Nov 04 18:52:55 csp-idm.pdh.csp krb5kdc[5354](info): AS_REQ (4 etypes
> {18 17 16 23}) 192.168.201.199: NEEDED_PREAUTH: admin at PDH.CSP for
> krbtgt/PDH.CSP at PDH.CSP, Additional pre-authentication required
> Nov 04 18:53:20 csp-idm.pdh.csp krb5kdc[5354](info): AS_REQ (4 etypes {18
> 17 16 23}) 192.168.201.199: ISSUE: authtime 1320432800, etypes {rep=18
> tkt=18 ses=18}, admin at PDH.CSP for krbtgt/PDH.CSP at PDH.CSP
> Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info): TGS_REQ (4 etypes {18
> 17 16 23}) 192.168.201.199: ISSUE: authtime 1320432800, etypes {rep=18
> tkt=18 ses=18}, admin at PDH.CSP for HTTP/csp-idm.pdh.csp at PDH.CSP
> Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info): TGS_REQ (1 etypes
> {18}) 192.168.201.199: ISSUE: authtime 1320432800, etypes {rep=18 tkt=18
> ses=18}, admin at PDH.CSP for krbtgt/PDH.CSP at PDH.CSP
> Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info): TGS_REQ (4 etypes {18
> 17 16 23}) 192.168.201.102: ISSUE: authtime 1320432800, etypes {rep=18
> tkt=18 ses=18}, admin at PDH.CSP for ldap/csp-idm.pdh.csp at PDH.CSP
> Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info): TGS_REQ (4 etypes {18
> 17 16 23}) 192.168.201.199: ISSUE: authtime 1320432800, etypes {rep=18
> tkt=18 ses=18}, admin at PDH.CSP for ldap/csp-idm.pdh.csp at PDH.CSP
>
>
>
> _______________________________________________
> Freeipa-users mailing listFreeipa-users at redhat.comhttps://www.redhat.com/mailman/listinfo/freeipa-users
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20111104/867d6826/attachment.htm>


More information about the Freeipa-users mailing list