John R. Shannon via FreeIPA-users wrote:
> Attached
It is failing with "KerberosError: No valid Negotiate header in server
response"
What package version of freeipa-server do you have?
This seems like
https://pagure.io/freeipa/issue/6773 which was fixed in
4.5.1
rob
>
> On 09/15/17 11:54, Rob Crittenden via FreeIPA-users wrote:
>> John R. Shannon via FreeIPA-users wrote:
>>> Attached in gzip'd form
>>
>> We need /var/log/ipaclient-install.log
>>
>> rob
>>
>>>
>>> On 09/15/17 11:39, Rob Crittenden via FreeIPA-users wrote:
>>>> John R. Shannon via FreeIPA-users wrote:
>>>>> Running ipa-server-install I get:
>>>>>
>>>>> Configuring client side components
>>>>> Using existing certificate '/etc/ipa/ca.crt'.
>>>>> Client hostname:
auth.test.internal.johnrshannon.com
>>>>> Realm:
TEST.INTERNAL.JOHNRSHANNON.COM
>>>>> DNS Domain:
test.internal.johnrshannon.com
>>>>> IPA Server:
auth.test.internal.johnrshannon.com
>>>>> BaseDN: dc=test,dc=internal,dc=johnrshannon,dc=com
>>>>>
>>>>> Skipping synchronizing time with NTP server.
>>>>> New SSSD config will be created
>>>>> Configured sudoers in /etc/nsswitch.conf
>>>>> Configured /etc/sssd/sssd.conf
>>>>> trying
https://auth.test.internal.johnrshannon.com/ipa/json
>>>>> [try 1]: Forwarding 'schema' to json server
>>>>> 'https://auth.test.internal.johnrshannon.com/ipa/json'
>>>>> No valid Negotiate header in server response
>>>>> The ipa-client-install command failed. See
>>>>> /var/log/ipaclient-install.log for more information
>>>>> ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall):
ERROR
>>>>> Configuration of client side components failed!
>>>>>
>>>>> The system is a fresh, up to date, Fedora 26:
>>>>>
>>>>> 4.12.12-300.fc26.x86_64
>>>>>
>>>>> configured to include the FREE-IPA repository. FREE-IPA was
installed
>>>>> yesterday with:
>>>>>
>>>>> dnf install freeipa-*
>>>>>
>>>>> and running ipa-server-install. I'm not sure how to proceed. I
want to
>>>>> use pkinit.
>>>>>
>>>>> The log file shows that an exception was raised during the execution
of:
>>>>>
>>>>> 2017-09-15T14:52:27Z DEBUG args=/usr/sbin/ipa-client-install
--on-master
>>>>> --unattended --domain
test.internal.johnrshannon.com --server
>>>>>
auth.test.internal.johnrshannon.com --realm
>>>>>
TEST.INTERNAL.JOHNRSHANNON.COM --hostname
>>>>>
auth.test.internal.johnrshannon.com
>>>>>
>>>>>
>>>>
>>>> We need to see /var/log/ipaclient-install.log (gzip if its huge).
>>>>
>>>> rob
>>>> _______________________________________________
>>>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>>>> To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
>>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>>> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>>>
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>>
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>
--
John R. Shannon
john(a)johnrshannon.com
(208)522-4506