[Freeipa-users] IPA Client Unattended Registration Issue

[Martin Basti]

Please provide feedback if this (and which) solution works for you, this 
may help for other users too.
Martin

On 08/14/2015 11:02 AM, Martin Basti wrote:
>
>
> On 08/14/2015 10:54 AM, Martin Basti wrote:
>>
>>
>> On 08/14/2015 10:12 AM, Yogesh Sharma wrote:
>>> Hi,
>>>
>>> We use Chef to perform the basic system setup once we launch new 
>>> server.
>>>
>>> We are updating our cookbook to include ipa-client-install once we 
>>> run our base cookbook via chef-client.
>>>
>>> For unattended ipa-client installation, we are passing below parameters:
>>>
>>>
>>> /ipa-client-install --server=ipa.initd.int <http://ipa.initd.int> 
>>> --domain=initd.int <http://initd.int> --realm=INITD.INT 
>>> <http://INITD.INT>  --password=xxxxxxxxxx --mkhomedir --no-ntp 
>>> --unattended/
>>>
>>>
>>> However, we always get password incorrect error, though we are sure 
>>> it is correct:
>>>
>>>
>>> Joining realm failed: Incorrect password.
>>>
>>> Installation failed. Rolling back changes.
>>> IPA client is not configured on this system.
>>
>> Hello, please add --principal option
>>
>> probably --principal admin
>>
>> --pasword without --principal option requires bulk password 
>> (ipa-client-install -h)
>>
>> HTH
>> Martin
> Or if you want to use bulk password, you must add host with bulk 
> password before
>
> [ipaserver]$ ipa host-add client.initd.int --password=bulkpassword
> [client.initd.int]$ ipa-client-install .... --password=bulkpassword
>
> HTH
> Martin
>>>
>>>
>>> /Best Regards,/
>>> /__________________________________________
>>> /
>>> /Yogesh Sharma
>>> /
>>> /Email: yks0000 at gmail.com | Web: www.initd.in /
>>> /
>>> /
>>> /RHCE, VCE-CIA, RACKSPACE CLOUD U Certified/
>>>
>>> <https://www.fb.com/yks0000> <http://in.linkedin.com/in/yks0000> 
>>> <https://twitter.com/checkwithyogesh> 
>>> <http://google.com/+YogeshSharmaOnGooglePlus>
>>>
>>>
>>
>>
>>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150814/d6109ce4/attachment.htm>