[Freeipa-users] CentOS 6.5 client install failing

[Dave Jablonski]

Unfortunately no.  I don't have access to the server.
On Feb 10, 2014 2:36 PM, "Dmitri Pal" <dpal at redhat.com> wrote:

> On 02/08/2014 08:48 AM, Rob Crittenden wrote:
>
>> Dave Jablonski wrote:
>>
>>> FreeIPA Server:  Fedora 16, freeipa 2.1.4
>>> Latest CentOS 6.5 client
>>>
>>> When running:
>>>
>>> ipa-client-install --mkhomedir --enable-dns-updates
>>>
>>> The install fails with:
>>>
>>> trying https://<server-name>/ipa/xml
>>> Forwarding 'env' to server u'https://<server-name>/ipa/xml'
>>> Traceback (most recent call last):
>>>    File "/usr/sbin/ipa-client-install", line 2377, in <module>
>>>      sys.exit(main())
>>>    File "/usr/sbin/ipa-client-install", line 2363, in main
>>>      rval = install(options, env, fstore, statestore)
>>>    File "/usr/sbin/ipa-client-install", line 2167, in install
>>>      remote_env = api.Command['env'](server=True)['result']
>>>    File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 435,
>>> in __call__
>>>      ret = self.run(*args, **options)
>>>    File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line
>>> 1073, in run
>>>      return self.forward(*args, **options)
>>>    File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 769,
>>> in forward
>>>      return self.Backend.xmlclient.forward(self.name <http://self.name>,
>>> *args, **kw)
>>>    File "/usr/lib/python2.6/site-packages/ipalib/rpc.py", line 736, in
>>> forward
>>>      raise error(message=e.faultString)
>>> ipalib.errors.CCacheError: did not receive Kerberos credentials
>>>
>>> In /var/log/ipaclient-install.log:
>>>
>>> 2014-02-06T18:19:53Z DEBUG approved_usage = SSLServer intended_usage =
>>> SSLServer
>>> 2014-02-06T18:19:53Z DEBUG cert valid True for
>>> "CN=<server-name>,O=<domain>"
>>> 2014-02-06T18:19:53Z DEBUG handshake complete, peer = 10.1.1.111:443
>>> <http://10.1.1.111:443>
>>> 2014-02-06T18:19:53Z DEBUG Caught fault 1101 from server
>>> https://<server-name>/ipa/xml: did not receive Kerberos credentials
>>>
>>
>> We need to see more context from the client install log, preferably the
>> whole thing.
>>
>> IPA v2 doesn't support session cookies but the 3.x client should have
>> support for falling back to using TGT delegation.
>>
>> rob
>>
>> _______________________________________________
>> Freeipa-users mailing list
>> Freeipa-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>>
>
> Any chance to upgrade the server to something more modern?
>
>
> --
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager for IdM portfolio
> Red Hat Inc.
>
>
> -------------------------------
> Looking to carve out IT costs?
> www.redhat.com/carveoutcosts/
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>

-- 
 

IMPORTANT: This e-mail (including any attachments) is intended for the use 
of the individual or entity to which it is addressed and may contain 
information that is classified, private, or confidential. If the reader of 
this message is not the intended recipient, or the employee or agent 
responsible for delivering the message to the intended recipient, you are 
hereby notified that any dissemination, distribution, or copying of this 
communication is prohibited. If you have received this communication in 
error, please notify us immediately by replying to this e-mail. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140210/32052d8a/attachment.htm>