I don't know if I was clear on the issue- the FreeIPA server is running on Fedora 15, the client is CentOS 6. If your suggestion still applies I will look into the SL packages.<div>Thanks- J<br><div><br><div class="gmail_quote">
On Fri, Nov 4, 2011 at 3:12 PM, Adam Young <span dir="ltr"><<a href="mailto:ayoung@redhat.com">ayoung@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div text="#000000" bgcolor="#FFFFFF">
CentOS is far behind RHEL. Many of the issues you will find have
been fixed in released versions of IPA. This one is due, I think to
an earlier issue with directory server that has since been
upgraded. <br>
<br>
You might want to see if the versions shipped with Scientifix Linux
work better for you, but it is going to be quite a few packages.
Aside from freeipa* it will be xmlrpc, 38-ds-base and DNS dyndb
and possibly others.<div><div class="h5"><br>
<br>
<br>
<br>
<br>
<br>
<br>
On 11/04/2011 03:04 PM, Jimmy wrote:
</div></div><blockquote type="cite"><div><div class="h5">I'm running the ipa-client-install on a CentOS 6
client and get this error:
<div><br>
</div>
<div>
<div>[root@kudzu ~]# ipa-client-install </div>
<div>Discovery was successful!</div>
<div>Realm: PDH.CSP</div>
<div>DNS Domain: pdh.csp</div>
<div>IPA Server: csp-idm.pdh.csp</div>
<div>BaseDN: dc=pdh,dc=csp</div>
<div><br>
</div>
<div>Continue to configure the system with these values? [no]:
yes</div>
<div>Principal: admin</div>
<div>Password for <a href="mailto:admin@PDH.CSP:" target="_blank">admin@PDH.CSP:</a> </div>
<div>Joining realm failed: Operation failed! unsupported
extended operation</div>
<div>child exited with 9</div>
<div>Certificate subject base is: O=PDH.CSP</div>
</div>
<div><br>
</div>
<div>The only logs I see on the server are here:</div>
<div><br>
</div>
<div>
<div>Nov 04 18:52:55 csp-idm.pdh.csp krb5kdc[5354](info): AS_REQ
(4 etypes {18 17 16 23}) <a href="http://192.168.201.199" target="_blank">192.168.201.199</a>:
NEEDED_PREAUTH: <a href="mailto:admin@PDH.CSP" target="_blank">admin@PDH.CSP</a> for <a href="mailto:krbtgt/PDH.CSP@PDH.CSP" target="_blank">krbtgt/PDH.CSP@PDH.CSP</a>,
Additional pre-authentication required</div>
<div>Nov 04 18:53:20 csp-idm.pdh.csp krb5kdc[5354](info): AS_REQ
(4 etypes {18 17 16 23}) <a href="http://192.168.201.199" target="_blank">192.168.201.199</a>: ISSUE:
authtime 1320432800, etypes {rep=18 tkt=18 ses=18},
<a href="mailto:admin@PDH.CSP" target="_blank">admin@PDH.CSP</a> for <a href="mailto:krbtgt/PDH.CSP@PDH.CSP" target="_blank">krbtgt/PDH.CSP@PDH.CSP</a></div>
<div>Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info):
TGS_REQ (4 etypes {18 17 16 23}) <a href="http://192.168.201.199" target="_blank">192.168.201.199</a>: ISSUE:
authtime 1320432800, etypes {rep=18 tkt=18 ses=18},
<a href="mailto:admin@PDH.CSP" target="_blank">admin@PDH.CSP</a> for <a href="mailto:HTTP/csp-idm.pdh.csp@PDH.CSP" target="_blank">HTTP/csp-idm.pdh.csp@PDH.CSP</a></div>
<div>Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info):
TGS_REQ (1 etypes {18}) <a href="http://192.168.201.199" target="_blank">192.168.201.199</a>: ISSUE:
authtime 1320432800, etypes {rep=18 tkt=18 ses=18},
<a href="mailto:admin@PDH.CSP" target="_blank">admin@PDH.CSP</a> for <a href="mailto:krbtgt/PDH.CSP@PDH.CSP" target="_blank">krbtgt/PDH.CSP@PDH.CSP</a></div>
<div>Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info):
TGS_REQ (4 etypes {18 17 16 23}) <a href="http://192.168.201.102" target="_blank">192.168.201.102</a>: ISSUE:
authtime 1320432800, etypes {rep=18 tkt=18 ses=18},
<a href="mailto:admin@PDH.CSP" target="_blank">admin@PDH.CSP</a> for <a href="mailto:ldap/csp-idm.pdh.csp@PDH.CSP" target="_blank">ldap/csp-idm.pdh.csp@PDH.CSP</a></div>
<div>Nov 04 18:53:21 csp-idm.pdh.csp krb5kdc[5354](info):
TGS_REQ (4 etypes {18 17 16 23}) <a href="http://192.168.201.199" target="_blank">192.168.201.199</a>: ISSUE:
authtime 1320432800, etypes {rep=18 tkt=18 ses=18},
<a href="mailto:admin@PDH.CSP" target="_blank">admin@PDH.CSP</a> for <a href="mailto:ldap/csp-idm.pdh.csp@PDH.CSP" target="_blank">ldap/csp-idm.pdh.csp@PDH.CSP</a></div>
</div>
<div><br>
</div>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
Freeipa-users mailing list
<a href="mailto:Freeipa-users@redhat.com" target="_blank">Freeipa-users@redhat.com</a>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
</div>
<br>_______________________________________________<br>
Freeipa-users mailing list<br>
<a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br></blockquote></div><br></div></div>