[Freeipa-users] Re: RHEL/CentOS 5 and IPA 4.5

On ma, 06 marras 2017, Sigbjorn Lie via FreeIPA-users wrote:

Hi list,

RHEL/CentOS 5.11 clients does not seem to work with IPA 4.5 unless I go from sssd-ipa to sssd-ldap. I would prefer to continue to use sssd-ipa to allow the existing HBAC rules to function.

Is there a known workaround to get EL 5.11 clients to work with IPA 4.5 using sssd-ipa?

Thanks.

Regards, Siggi

[root@ipaclient sssd]# kinit -kt /etc/krb5.keytab

kinit(v5): Preauthentication failed while getting initial credentials

Uninstall pkinit-nss if you have it installed. Restart sssd.