Nicholas DeMarco via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> writes:
Here is better detail:
We're having issue with kerberos and ipa client.
While running ipa-client-install, when prompted for user who is authorized
to enroll we enter admin and his password but get "Preauthentication
failed".
At no point in the logs you pasted is the user asked for a password.
Did you remove that, or are you attempting to use non-password preauth?
I'm generally unsure what you're trying to do. It sounds like when you
run `ipa-client-install`, it prompts you for credentials for admin,
which are rejected - do I have that right?
Can you `kinit admin` on the client? (Is this one of the things you
posted?) If not, have you checked that the client is trying to talk to
the correct server?
Thanks,
--Robbie