[Freeipa-users] SSH using putty to IPA client

[Troels Hansen]

----- On Sep 26, 2016, at 10:18 AM, Sumit Bose sbose at redhat.com wrote:

> 
> Have you checked the firewalls? AD clients must be able to talk to the
> KDC port (88 udp and tcp) on the IPA servers to get service tickets for
> IPA hosts.
> 


KDC ports seems to work....  Besides, I don't have a TGT for the IPA (LX) domain, untill I try to SSH to it. I guess I shouldn't be able to if KDC traffic was blocked?