[Freeipa-users] Unable to enrol servers with principal
Dmitri Pal
dpal at redhat.com
Sat Feb 9 01:07:14 UTC 2013
On 02/08/2013 07:47 PM, Charlie Derwent wrote:
> Hi
>
> Whenever I attempt an unattended installation with a principal and
> password. The installation fails.
>
> I'm using the following syntax for my command
>
> ipa-client-install --domain=example.com <http://example.com>
> --server=ipa.example.com <http://ipa.example.com> --realm=EXAMPLE.COM
> <http://EXAMPLE.COM> --principal=user --password=pass -U
> --ntp-server=123.123.123.123 --mkhomedir
> --hostname=server1.example.com <http://server1.example.com>
>
> The error I get varies between (in order of frequency)
>
> Joining realm failed: /usr/sbin/ipa-join: symbol lookup error:
> /usr/sbin/ipa-join: undefined symbol: xmlrpc_server_info_set_user
>
> and
>
> kinit(v5): Password incorrect while getting initial credentials
>
> and
>
> Password expired. you must change it now.
> kinit(v5): Cannot read password while getting initial credentials
>
> The password is 100% right as I can kinit on other servers and access
> the webgui with the same details.
>
> OTP's work flawlessly.
>
> ipa-client = tried with 2.1.3-1.el5 and 2.1.3-5.el5_9.2 (RHEL 5.8)
>
> ipa-server = 2.2.0-16.el6 (RHEL 6.3)
I assume this happens on the newly installed system...
Is the time on the system correct?
>
> Thanks,
> Charlie
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130208/6a357ecc/attachment.htm>
More information about the Freeipa-users
mailing list