Hi guys
I do not see any clear problems and no errors in client log
but each time I try to install client process stops:
...
No SRV records of NTP servers found and no NTP server or
pool address was provided.
Using default chrony configuration.
Attempting to sync time with chronyc.
Time synchronization was successful.
Do you want to download the CA cert from
http://c8kubermaster2.ton.mko.priv.com/ipa/config/ca.crt ?
(this is INSECURE) [no]:
---
If I go with 'yes' as the answer then:
...
Joining realm failed: SASL Bind failed
Invalid credentials
Installation failed. Rolling back changes.
Disabling client Kerberos and LDAP configurations
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
Client uninstall complete.
The ipa-client-install command failed. See
/var/log/ipaclient-install.log for more information
----
One thing is new and different from all freeIPA deployments
I have done in the past, namely
REALM =! FQDN
but both share a "top level/part".
I do not think about that being the root cause.
Client install would succeed if I gave it:
--server= --domain= --realm= (which is bit weir cause those
seem to get discovered as expected)
Any thought on routes of troubleshooting very appreciated.
many thanks, L.