[Freeipa-users] Ipa migration, from ui cannot change password

[James James]

Thanks for your help.

I've got in krb5kdc.log :

Sep 20 17:00:47 ipa.example.com krb5kdc[14155](info): TGS_REQ (4 etypes {18
17 16 23}) 129.104.11.72: ISSUE: authtime
 1348153247, etypes {rep=18 tkt=18 ses=18}, host/
elide.example.com at example.com for ldap/ipa.lix.polytechniqu
e.fr at example.com
Sep 20 17:00:56 ipa.example.com krb5kdc[14164](info): AS_REQ (4 etypes {18
17 16 23}) 129.104.11.72: NEEDED_PREAUTH:
regis at example.com for krbtgt/example.com at example.com, Additional
pre-authentication required
Sep 20 17:00:56 ipa.example.com krb5kdc[14169](info): preauth (timestamp)
verify failure: No matching key in entry
Sep 20 17:00:56 ipa.example.com krb5kdc[14169](info): AS_REQ (4 etypes {18
17 16 23}) 129.104.11.72: PREAUTH_FAILED:
regis at example.com for krbtgt/example.com at example.com, Preauthentication
failed
Sep 20 17:00:56 ipa.example.com krb5kdc[14161](info): AS_REQ (4 etypes {18
17 16 23}) 129.104.11.72: NEEDED_PREAUTH:
host/elide.example.com at example.com for krbtgt/example.com at example.com,
Additional pre-auth
entication required


I have spent the whole day trying to debug my server. I will re-install and
re-migrate to see if I have missed something ..

2012/9/20 Dmitri Pal <dpal at redhat.com>

>  On 09/20/2012 12:50 PM, James James wrote:
>
> Oups .. migration mode is enable ...
>
>
> The ldap (access, error) and kerberos logs from the server would be
> helpful to troubleshoot.
> /var/log/dirsrv/...
> krb5kdc.log
>
>
>
> 2012/9/20 James James <jreg2k at gmail.com>
>
>> Yes config mod is enabled
>>
>> 2012/9/20 Dmitri Pal <dpal at redhat.com>
>>
>>>   On 09/20/2012 12:30 PM, James James wrote:
>>>
>>> Hi,
>>>
>>> I've done a migration from ldap to ipa. Everything works well but when I
>>> try to change my password in the ui (
>>> https://ipa.example.com/ipa/migration) I have this error message :
>>>  We're Sorry
>>>
>>> *There was a problem with your request. Please, try again later.*
>>>
>>> If the problem persists, contact your administrator.
>>>
>>> In the log :
>>>
>>> Thu Sep 20 18:29:54 2012] [error] ipa: ERROR: migration bind failed:
>>> Inappropriate authentication ()
>>>
>>>  Can somebody give me some help ?
>>>
>>>
>>>    And I assume the migration is in fact enabled?
>>>
>>> # ipa config-mod --enable-migration=TRUE
>>>
>>>
>>>
>>> Can it be that you are hitting
>>> https://bugzilla.redhat.com/show_bug.cgi?id=822350
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> Freeipa-users mailing listFreeipa-users at redhat.comhttps://www.redhat.com/mailman/listinfo/freeipa-users
>>>
>>>
>>>
>>> --
>>> Thank you,
>>> Dmitri Pal
>>>
>>> Sr. Engineering Manager for IdM portfolio
>>> Red Hat Inc.
>>>
>>>
>>> -------------------------------
>>> Looking to carve out IT costs?www.redhat.com/carveoutcosts/
>>>
>>>
>>
>
>
> --
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager for IdM portfolio
> Red Hat Inc.
>
>
> -------------------------------
> Looking to carve out IT costs?www.redhat.com/carveoutcosts/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120920/8d0ba320/attachment.htm>