[Freeipa-users] Unable to enrol servers with principal

[Charlie Derwent]

Hi

Whenever I attempt an unattended installation with a principal and
password. The installation fails.

I'm using the following syntax for my command

ipa-client-install --domain=example.com --server=ipa.example.com --realm=
EXAMPLE.COM --principal=user --password=pass -U
--ntp-server=123.123.123.123 --mkhomedir --hostname=server1.example.com

The error I get varies between (in order of frequency)

Joining realm failed: /usr/sbin/ipa-join: symbol lookup error:
/usr/sbin/ipa-join: undefined symbol: xmlrpc_server_info_set_user

and

kinit(v5): Password incorrect while getting initial credentials

and

Password expired. you must change it now.
kinit(v5): Cannot read password while getting initial credentials

The password is 100% right as I can kinit on other servers and access the
webgui with the same details.

OTP's work flawlessly.

ipa-client = tried with 2.1.3-1.el5 and 2.1.3-5.el5_9.2 (RHEL 5.8)

ipa-server = 2.2.0-16.el6  (RHEL 6.3)

Thanks,
Charlie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130209/063fafdf/attachment.htm>