<div dir="ltr">HI<div><br></div><div>thanks for the replay.</div><div><br></div><div>i was trying for keytab and getting below error.</div><div><br></div><div><div>[root@kwtpocpbis01 ~]# ipa-getkeytab -s kwtpocpbis01.solipa.local -p host/kwttestsolaris10.solipa.local -k /tmp/krb5.keytab -e des-cbc-crc</div><div>Operation failed! All enctypes provided are unsupported</div><div><br></div><div>my krb5.conf looks like below:</div><div><br></div><div><div>[libdefaults]</div><div> default_realm = SOLIPA.LOCAL</div><div> dns_lookup_realm = false</div><div> dns_lookup_kdc = true</div><div> rdns = false</div><div> ticket_lifetime = 24h</div><div> forwardable = yes</div><div> default_ccache_name = KEYRING:persistent:%{uid}</div><div> allow_weak_crypto = true</div></div><div><br></div><div>what will be issue with my command?</div><div><br></div><div>Regards,</div><div>Ben</div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 6, 2015 at 11:35 PM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div class=""><div class="h5">Ben .T.George wrote:<br>
><br>
> HI<br>
><br>
> i was trying to ass solaris 10 client from command line. Host add comand<br>
> went successfully and service add for /host is giving error.<br>
><br>
> please check below output and help me to solve this<br>
><br>
> [root@kwtpocpbis01 ~]# ipa host-add --force --ip-address=172.16.107.107<br>
> kwttestsolaris10.solipa.local<br>
> ------------------------------------------<br>
> Added host "kwttestsolaris10.solipa.local"<br>
> ------------------------------------------<br>
> Host name: kwttestsolaris10.solipa.local<br>
> Principal name: host/kwttestsolaris10.solipa.local@SOLIPA.LOCAL<br>
> Password: False<br>
> Keytab: False<br>
> Managed by: kwttestsolaris10.solipa.local<br>
><br>
> [root@kwtpocpbis01 ~]# ipa service-add host/kwttestsolaris10.solipa.local<br>
> ipa: ERROR: You must enroll a host in order to create a host service<br>
><br>
> what this means "ipa: ERROR: You must enroll a host in order to create a<br>
> host service" . I can see the host from IPA web front end. that means<br>
> host is added noe.? or this is pointing to another service<br>
<br>
</div></div>The host service is implicit and lives within the host. You don't need<br>
to (nor can you) add it.<br>
<br>
If you want to get a keytab for it just use ipa-getkeytab to fetch it.<br>
<span class=""><font color="#888888"><br>
rob<br>
<br>
</font></span></blockquote></div><div class="gmail_signature"><div dir="ltr"><div><span style="border-collapse:collapse"><font face="'courier new', monospace" size="1"><font color="#ff9900"><br></font></font></span></div></div></div>
</div></div></div>