On Sun, Jun 6, 2021 at 11:09 AM lejeczek via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi guys.

I'm trying client install and I fail:
Time synchronization was successful.
Please make sure the following ports are opened in the
firewall settings:
      TCP: 80, 88, 389
      UDP: 88 (at least one of TCP/UDP ports 88 has to be open)
Also note that following ports are necessary for ipa-client
working properly after enrollment:
      TCP: 464
      UDP: 464, 123 (if NTP enabled)
Installation failed. Rolling back changes.
Disabling client Kerberos and LDAP configurations
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
Client uninstall complete.
Kerberos authentication failed: kinit: Improper format of
Kerberos configuration file while initializing Kerberos 5

This is the client's problem right? Reason I'm bit doubtful
is such that all the usual places I made sure are
plain-vanilla. What do I miss?

do you have any krb5 config snippet defined in /etc/krb5.conf.d or /var/lib/sss/pubconf/krb5.include.d/? /etc/krb5.conf includes these directories and they may contain a file with syntax errors.
many thanks, L.
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure