<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 11/11/2011 03:52 PM, Boris Epstein wrote:
<blockquote
cite="mid:CADeF1XHj+0vSAeL7MNO5XTgRuZ6WfQ6K==GmQHyFkh94bNLPaQ@mail.gmail.com"
type="cite">Hello all,
<div><br>
</div>
<div>I've got my FreeIPA seemingly running on a Fedora 16 machine
but I can not log into it from a browser as I get the "Your
kerberos ticket is no longer valid." message. So the question
is: is there a good guide on how to set up the Kerberos
components involved?</div>
</blockquote>
<br>
Do you use browser from the same machine as you server or different?<br>
Is it a Linux machine?<br>
What is the browser you are using?<br>
<br>
The procedure is (on server):<br>
1) Install server<br>
2) kinit admin (or other user you want to use that you added)<br>
3) start browser<br>
4) follow the prompts reading carefully - accept certs and let the
browser configuration script run<br>
5) Enjoy the UI<br>
<br>
On non server:<br>
1) Install client <br>
2) kinit admin (or other user you want to use that you added)<br>
3) start browser on that machine<br>
4) follow the prompts reading carefully - accept certs and let the
browser configuration script run<br>
5) Enjoy the UI<br>
<br>
If you are trying to access it from a machine that is not a member
of the domain you have to go to IPA and allow basic auth but we do
not recommend it as it is insecure.<br>
<br>
<br>
<br>
<blockquote
cite="mid:CADeF1XHj+0vSAeL7MNO5XTgRuZ6WfQ6K==GmQHyFkh94bNLPaQ@mail.gmail.com"
type="cite">
<div><br>
</div>
<div>Thanks.</div>
<div><br>
</div>
<div>Boris.</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>