Not connecting to the FreeIPA server?




On Monday, November 20, 2017 4:36 PM, Robbie Harwood via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:


Andrew Meyer via FreeIPA-users <freeipa-users@lists.fedorahosted.org>

writes:

> [root@asm-rancid02 keytabs]# ipa-getkeytab -s asm-rancid02.mgt.asm.borg.local. -p radius/asm-rancid02.mgt.asm.borg.local -k /etc/krb5.keytab
> Unable to initialize STARTTLS session
> Failed to bind to server!
> Retrying with pre-4.0 keytab retrieval method...
> Unable to initialize STARTTLS session
> Failed to bind to server!
> Failed to get keytab
> [root@asm-rancid02 keytabs]#
>
> Do I need to generate a keytab first?  Should this be generated when I
> add the server to the domain/realm?


This looks like it wasn't able to connect properly, so it hasn't reached
the point where Kerberos is involved.

Keytabs are generated when the machine is enrolled in the realm.

Thanks,
--Robbie

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org