[Freeipa-users] IPA Master Issue - Not starting

[Petr Spacek]

Hello,

On 15.8.2014 03:52, Peter Grant wrote:
> 2014-08-15T11:43:46.434383+10:00 host named[6470]: Failed to init credentials (Decrypt integrity check failed)
>
> 2014-08-15T11:43:46.434884+10:00 host named[6470]: loading configuration: failure
>
> 2014-08-15T11:43:46.434991+10:00 host named[6470]: exiting (due to fatal error)
>
> 2014-08-15T11:43:47.435187+10:00 host ns-slapd: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Cannot contact any KDC for realm ‘DOMAIN.COM')

For named issue please follow instructions on
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/NamedCannotStart#a3.FailedtoinitcredentialsorFailedtogetinitialcredentialsDecryptintegritycheckfailedorClientscredentialshavebeenrevoked

It seems that /etc/named.keytab is somehow corrupted or obsolete.

Also, KDC logs in /var/log/krb5kdc.log can tell you more.

I hope that others will add ideas about other errors.

-- 
Petr^2 Spacek