[Freeipa-users] [bug report] IPA failing to start

[Peter Viskup]

Hi all,
don't want to register on FreeIPA nor RedHat/CentOS ticketing systems, but
want to make others know about my discovery. Hope somebody will review it
and open bug report.

The IPA (Kerberos part) failing to start when

supported_enctypes = aes camellia -des3 -des -rc4

listed in kdc.conf for realm.
With listing

 supported_enctypes = aes256-cts-hmac-sha1-96:normal
aes128-cts-hmac-sha1-96:normal camellia256-cts-cmac:normal
camellia128-cts-cmac:normal -des -des3 -rc4

the Kerberos and IPA start successfully.

These are the installed and affected versions
ipa-server-3.3.3-28.el7.centos.1.x86_64
krb5-server-1.11.3-49.el7.x86_64
krb5-libs-1.11.3-49.el7.x86_64


Hope it will help somebody.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141104/d65bd3c8/attachment.htm>