[Freeipa-users] Joining realm failed: Host is already joined

Rob Crittenden rcritten at redhat.com
Thu Jun 21 15:18:11 UTC 2012


george he wrote:
> Thanks Petr,
>
> Now it says:
>
> Failed to obtain host TGT.
> Installation failed. Rolling back changes.
> I did the manual installation on this machine when the
> ipa-client-install script failed.
> I guess there's a lot to clean up :(

/var/log/ipaclient-install.log may have more details on the failure.

It could be that you have a lingering host principal. Run klist -kt 
/etc/krb5.keytab. To remove all principals for your realm from this 
keytab run:

# ipa-rmkeytab -k /etc/krb5.keytab -r YOUR_REALM

rob




More information about the Freeipa-users mailing list