[Freeipa-users] Client Auth Failing - Ubuntu 15.10

[Jakub Hrozek]

On Tue, Feb 23, 2016 at 03:33:31PM -0500, Jester wrote:
> Made no changes to the system between posting.  Only tried a couple of
> kinits to generate some logs.
> 
> Set sssd debug to 9, restarted, did a few kinits.

kinit doesn't hit sssd, but goes directly to the KDC.

> 
> root at nuc0:/var/log/sssd# service sssd start
> root at nuc0:/var/log/sssd# kinit admin
> Password for admin at MRJESTER.NET:
> root at nuc0:/var/log/sssd# kinit jon
> kinit: Client 'jon at MRJESTER.NET' not found in Kerberos database while

Again, if you're sure the principal 'jon' exists on the server, then I
would suggest to try:
    KRB5_TRACE=/dev/stderr kinit jon
and see if you talk to the KDC you expect.