[Freeipa-users] Failed to initialize credentials using keytab

[Ondrej Valousek]

does
kinit -k host/sysvm-ipa.example.com at EXAMPLE.COM
work for you?


On 07/10/2012 10:53 AM, freeipa at noboost.org wrote:
> Hi All,
>
> Server:
> RHEL 6.3
> ipa-admintools-2.2.0-16.el6.x86_64
> ipa-client-2.2.0-16.el6.x86_64
> ipa-pki-ca-theme-9.0.3-7.el6.noarch
> ipa-pki-common-theme-9.0.3-7.el6.noarch
> ipa-python-2.2.0-16.el6.x86_64
> ipa-server-2.2.0-16.el6.x86_64
> ipa-server-selinux-2.2.0-16.el6.x86_64
> libipa_hbac-1.8.0-32.el6.x86_64
> libipa_hbac-python-1.8.0-32.el6.x86_64
> python-iniparse-0.3.1-2.1.el6.noarch
>
> Odd Error in /var/log/messages:
> Jul 10 18:15:30 sysvm-ipa [sssd[ldap_child[2070]]]: Failed to initialize
> credentials using keytab [(null)]: Decrypt integrity check failed.
> Unable to create GSSAPI-encrypted LDAP connection.
>
> Jul 10 18:15:30 sysvm-ipa [sssd[ldap_child[2070]]]: Decrypt integrity
> check failed
>
> Jul 10 18:15:42 sysvm-ipa rhnsd[2194]: Red Hat Network Services Daemon
> starting up, check in interval 240 minutes.
>
> Jul 10 18:15:43 sysvm-ipa certmonger: Error setting up ccache for local
> "host" service using default keytab.
>
>
> I checked the servers ketab and as far as I can tell, it seems fine?
> [root at sysvm-ipa etc]# klist -k /etc/krb5.keytab
> Keytab name: WRFILE:/etc/krb5.keytab
> KVNO Principal
> ----
> --------------------------------------------------------------------------
>     2 host/sysvm-ipa.example.com at EXAMPLE.COM
>     2 host/sysvm-ipa.example.com at EXAMPLE.COM
>     2 host/sysvm-ipa.example.com at EXAMPLE.COM
>     2 host/sysvm-ipa.example.com at EXAMPLE.COM
>     2 host/sysvm-ipa.example.com at EXAMPLE.COM
>     2 host/sysvm-ipa.example.com at EXAMPLE.COM
>
>
> cya
>
> Craig
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120710/ed332d30/attachment.htm>