<div dir="ltr">Hi Team,<div><br></div><div>Please give me some suggestion to fix the below issue......</div><div><br></div><div><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">tarak sinha</b> <span dir="ltr"><<a href="mailto:taraksinha09@gmail.com">taraksinha09@gmail.com</a>></span><br>Date: Mon, Jan 2, 2017 at 9:03 PM<br>Subject: Re: [Freeipa-users] IPA Client not able to remove<br>To: Rob Crittenden <<a href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>><br><br><br><div dir="ltr">Thanks Rob for your suggestion... <div>I have another issue on my hosts. Few node's are asking password rather than authenticated with kerberoas.</div><div><br></div><div>Getting below error (Unspecified GSS failure). rest of the hosts are able to login via gssapi-with-mic method</div><div><br></div><div><br></div><div>-------------snip----------</div><div><br></div><div><div>debug1: Authentications that can continue: publickey,gssapi-with-mic,<wbr>password</div><div>debug1: Next authentication method: gssapi-with-mic</div><div>debug1: Unspecified GSS failure. Minor code may provide more information</div><div>KDC has no support for encryption type</div><div><br></div><div>debug1: Unspecified GSS failure. Minor code may provide more information</div><div>KDC has no support for encryption type</div><div><br></div><div>debug1: Unspecified GSS failure. Minor code may provide more information</div><div><br></div><div><br></div><div>debug2: we sent a gssapi-with-mic packet, wait for reply</div><div>debug1: Authentications that can continue: publickey,gssapi-with-mic,<wbr>password</div><div>debug2: we did not send a packet, disable method</div><div>debug1: Next authentication method: publickey</div><div>debug1: Offering public key: /uhome/tsinha/.ssh/id_rsa</div><div>debug2: we sent a publickey packet, wait for reply</div><div><br></div><div>------------snip-------------</div><div><br></div><div>Please give me some advise to login my linux nodes without any password.</div><div><br></div></div><div>Thanks,</div><div><br></div><div>Tarak</div></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On Mon, Jan 2, 2017 at 7:28 AM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>tarak sinha wrote:<br>
> Hi FreeIPA Team,<br>
><br>
><br>
><br>
> I am not able to remove the IPA client host entry from Web UI and<br>
> command line as well. While trying to add it’s showing “Host is already<br>
> exist”. Please give me some suggestion to get rid if this issue.<br>
><br>
><br>
><br>
</span>> #ipa host-del <a href="http://xxx.example.com" rel="noreferrer" target="_blank">xxx.example.com</a> <<a href="http://xxx.example.com" rel="noreferrer" target="_blank">http://xxx.example.com</a>> --updatedns<br>
><br>
> ipa: ERROR: <a href="http://xxx.example.com" rel="noreferrer" target="_blank">xxx.example.com</a> <<a href="http://xxx.example.com" rel="noreferrer" target="_blank">http://xxx.example.com</a>>: host not found<br>
><br>
> #ipa host-show <a href="http://xxx.example.com" rel="noreferrer" target="_blank">xxx.example.com</a> <<a href="http://xxx.example.com" rel="noreferrer" target="_blank">http://xxx.example.com</a>><br>
><br>
> ipa: ERROR: <a href="http://xxx.example.com" rel="noreferrer" target="_blank">xxx.example.com</a> <<a href="http://xxx.example.com" rel="noreferrer" target="_blank">http://xxx.example.com</a>>: host not found<br>
<br>
It sounds like it is a replication conflict entry. You can confirm by<br>
doing something like 'ipa host-find <a href="http://xxx.example.com" rel="noreferrer" target="_blank">xxx.example.com</a> --all' and look at<br>
the DN. If it has nsuniqueid in the DN then it is a conflict entry. See<br>
<a href="https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Managing_Replication-Solving_Common_Replication_Conflicts.html" rel="noreferrer" target="_blank">https://access.redhat.com/docu<wbr>mentation/en-US/Red_Hat_Direct<wbr>ory_Server/8.2/html/Administra<wbr>tion_Guide/Managing_Replicatio<wbr>n-Solving_Common_Replication_<wbr>Conflicts.html</a><br>
but given you want to remove it you can do so via ldapdelete.<br>
<span class="m_8605364662790916085HOEnZb"><font color="#888888"><br>
rob<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div></div></div>-- <br><span class=""><div class="m_8605364662790916085gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks,</span></b></p>
<p><b><span style="font-size:11.0pt;font-family:"Andalus","serif";color:#1f497d">Tarak Nath Sinha</span></b></p><p><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d;border:none windowtext 1.0pt;padding:0in">Mobile: </span></b><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d">+91 8197522750</span></b></p></div></div>
</span></div>
</div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks,</span></b></p>
<p><b><span style="font-size:11.0pt;font-family:"Andalus","serif";color:#1f497d">Tarak Nath Sinha</span></b></p><p><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d;border:none windowtext 1.0pt;padding:0in">Mobile: </span></b><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d">+91 8197522750</span></b></p></div></div>
</div></div>