<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office"><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px"><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">Half the time ipa-client-install will fail at getting the TGT. Google showed posts like, <a href="https://bugzilla.redhat.com/show_bug.cgi?id=845691" class="enhancr2_bcfacb49-4798-67f5-ef75-c20db18208ea" id="yui_3_16_0_ym19_1_1461272074351_4864">Bug 845691 – ipa-client-install Failed to obtain host TGT</a>. I reduced <span style="font-family: monospace; font-size: medium; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1461272074351_4901">_kerberos-master._tcp' '_kerberos-master._udp' '_kerberos._tcp' '_kerberos._udp' to one server entry only. But it didn't help to reduce the failure rate. Thanks for your help.</span></div><div id="yui_3_16_0_ym19_1_1461272074351_4877"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">cleint</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">ipa-client-3.0.0-47.el6_7.2.x86_64<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">server</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">ipa-server-3.0.0-47.el6_7.1.x86_64<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">ipa-client-install --hostname=client1.example.com --server=ipa-server.example.com --domain=example.com -N --mkhomedir --unattended -p ipaadd@EXAMPLE.COM -w 'password1' --ca-cert-file=/etc/ipa/ca.crt -d</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">...</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426">...</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4610">Enrolled in IPA realm EXAMPLE.COM</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4611">args=kdestroy</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4612">stdout=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4613">stderr=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4614">args=/usr/bin/kinit -k -t /etc/krb5.keytab host/client1.example.com@EXAMPLE.COM</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4615">stdout=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4616">stderr=kinit: Generic preauthentication failure while getting initial credentials</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4617"><br id="yui_3_16_0_ym19_1_1461272074351_4618"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4619">args=/usr/bin/kinit -k -t /etc/krb5.keytab host/client1.example.com@EXAMPLE.COM</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4620">stdout=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4621">stderr=kinit: Generic preauthentication failure while getting initial credentials</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4622"><br id="yui_3_16_0_ym19_1_1461272074351_4623"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4624">args=/usr/bin/kinit -k -t /etc/krb5.keytab host/client1.example.com@EXAMPLE.COM</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4625">stdout=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4626">stderr=kinit: Generic preauthentication failure while getting initial credentials</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4627"><br id="yui_3_16_0_ym19_1_1461272074351_4628"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4629">args=/usr/bin/kinit -k -t /etc/krb5.keytab host/client1.example.com@EXAMPLE.COM</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4630">stdout=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4631">stderr=kinit: Generic preauthentication failure while getting initial credentials</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4632"><br id="yui_3_16_0_ym19_1_1461272074351_4633"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4634">args=/usr/bin/kinit -k -t /etc/krb5.keytab host/client1.example.com@EXAMPLE.COM</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4635">stdout=</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4636">stderr=kinit: Generic preauthentication failure while getting initial credentials</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4637"><br id="yui_3_16_0_ym19_1_1461272074351_4638"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4639">Failed to obtain host TGT.</div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1461272074351_4426"><br></div></div></body></html>