<html> <head> </head> <body class='hmmessage'><div dir='ltr'> <div dir="ltr"> <style></style> <div dir="ltr">Greetings,<o:p></o:p> <o:p> </o:p> Trying to get a Red Hat 5.8 server installed as a client to my Red Hat 6 server.<o:p></o:p> <o:p> </o:p> The first problem was at the install.<o:p></o:p> <o:p> </o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; ">yum install ipa-client ipa-admintools <o:p></o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; "><o:p> </o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; ">No ipa-admintools! The RHEL5 system is registered with Red Hat and I have searched the web.<o:p></o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; "><o:p> </o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; ">But I went ahead with the installation and I have joined RHEL5 to the domain.<o:p></o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; "><o:p> </o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; ">From the command line.<o:p></o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; ">kinit mdavidson will log in.<o:p></o:p> <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; "><o:p> </o:p> klist<o:p></o:p> Ticket cache: FILE:/tmp/krb5cc_0<o:p></o:p> Default principal: <a href="mailto:mdavidson@EXAMPLE.COM">mdavidson@EXAMPLE.COM</a><o:p></o:p> <o:p> </o:p> Looks good but I cannot setup ssh and ssh is essential.<o:p></o:p> <o:p> </o:p> I assume it’s because I cannot perform this part of the steps.<o:p></o:p> <o:p> </o:p> <a href="http://bit.ly/Ivxxwj">http://bit.ly/Ivxxwj</a> : Procedure 1.5. To configure a Red Hat Enterprise Linux 5 IPA client for incoming SSH connections:<o:p></o:p> The IPA client installation process configures the NTP service by default, but you should ensure that time on the IPA client and server is synchronized. If it is not, run the following commands on the IPA client:<o:p></o:p> # service ntpd stop<o:p></o:p> # ntpdate -s -p 8 -u ipaserver.example.com<o:p></o:p> # service ntpd start<o:p></o:p> Note<o:p></o:p> The ntpdate command does not work if ntpd is running.<o:p></o:p> Obtain a Kerberos ticket for the admin user.<o:p></o:p> # kinit admin<o:p></o:p> Add a host service principal on the IPA client.<o:p></o:p> # ipa-addservice host/ipaclient.example.com (My error is -bash: ipa: command not found)<o:p></o:p> Retrieve the keytab.<o:p></o:p> # ipa-getkeytab -s ipaserver.example.com -p host/ipaclient.example.com -k /etc/krb5.keytab (My error is -bash: ipa: command not found)<o:p></o:p> <o:p> </o:p> From RHEL5 /var/log/secure:<o:p></o:p> May 1 14:09:41 wkylexsys21 sshd[2984]: Invalid user mdavidson from 192.168.1.110<o:p></o:p> May 1 14:09:41 wkylexsys21 sshd[2985]: input_userauth_request: invalid user mdavidson<o:p></o:p> May 1 14:09:46 wkylexsys21 sshd[2984]: pam_unix(sshd:auth): check pass; user unknown<o:p></o:p> May 1 14:09:46 wkylexsys21 sshd[2984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=rhel6.example.com<o:p></o:p> May 1 14:09:46 wkylexsys21 sshd[2984]: pam_succeed_if(sshd:auth): error retrieving information about user mdavidson<o:p></o:p> May 1 14:09:48 wkylexsys21 sshd[2984]: Failed password for invalid user mdavidson from 192.168.1.110 port 58959 ssh2<o:p></o:p> May 1 14:10:04 wkylexsys21 sshd[2984]: Failed password for invalid user mdavidson from 192.168.1.110 port 58959 ssh2<o:p></o:p> May 1 14:10:09 wkylexsys21 sshd[2984]: pam_unix(sshd:auth): check pass; user unknown<o:p></o:p> May 1 14:10:09 wkylexsys21 sshd[2984]: pam_succeed_if(sshd:auth): error retrieving information about user mdavidson<o:p></o:p> May 1 14:10:10 wkylexsys21 sshd[2984]: Failed password for invalid user mdavidson from 192.168.1.110 port 58959 ssh2<o:p></o:p> May 1 14:10:22 wkylexsys21 sshd[2984]: pam_unix(sshd:auth): check pass; user unknown<o:p></o:p> May 1 14:10:22 wkylexsys21 sshd[2984]: pam_succeed_if(sshd:auth): error retrieving information about user mdavidson<o:p></o:p> May 1 14:10:24 wkylexsys21 sshd[2984]: Failed password for invalid user mdavidson from 192.168.1.110 port 58959 ssh2<o:p></o:p> <o:p> </o:p> DNS works.<o:p></o:p> ntpd is running.<o:p></o:p> I checked all the configuration files.<o:p></o:p> <o:p> </o:p> I have searched for <span style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: white; background-position: initial initial; background-repeat: initial initial; ">ipa-admintools and I’m sure this is why I cannot run the ipa commands in step 1.5.<o:p></o:p> <o:p> </o:p> <a name="_MailAutoSig">What am I missing? Any thoughts or suggestions?<o:p></o:p></a> <o:p> </o:p> Matt<o:p></o:p></div> </div> </div></body> </html>