[Freeipa-users] problems with trust with AD (2 different domains

Sumit Bose sbose at redhat.com
Fri Apr 19 10:11:03 UTC 2013


On Fri, Apr 19, 2013 at 11:45:47AM +0200, Natxo Asenjo wrote:
> I saw there is a log in /var/log/samba/log.wb-IPA
> 
> The log complains about missing keys for the spn for the hostname (not the
> fqdn, just the hostname):
> 
>  Connection to LDAP server failed for the 15 try!
> [2013/04/19 11:39:22.352522,  0] ipa_sam.c:3689(bind_callback_cleanup)
>   kerberos error: code=-1765328203, message=Keytab contains no suitable
> keys for cifs/kdc at IPA.ASENJO.NX

Can you check if

$ hostname

returns the fully qualified hostname, if not, please fix this, call
ipactl stop and ipactl start and try again.

bye,
Sumit

> 
> 
> --
> Groeten,
> natxo




More information about the Freeipa-users mailing list