I'm having trouble with kerberos.
On ipa:
$ kinit <username>
[1625] 1581094928.1017: Response was from master KDC
[1625] 1581094928.1018: Processing preauth types: 19
-and-
$ kinit admin
[1626] 1581094962.274365: Received error from KDC:
-1765328360/Preauthentication failed
[1626] 1581094962.274368: Preauthenticating using KDC method data
and from the logs:
Feb 07 12:13:19
ipa1.practichem.com krb5kdc[1224](info): AS_REQ (8 etypes
{aes256-cts-hmac-sha1-96(18), aes128-cts-hmac-sha1-96(17),
aes256-cts-hmac-sha384-192(20), aes128-cts-hmac-sha256-128(19),
DEPRECATED:des3-hmac-sha1(16), DEPRECATED:arcfour-hmac(23),
camellia128-cts-cmac(25), camellia256-cts-cmac(26)}) 10.10.1.80:
NEEDED_PREAUTH: admin(a)practichem.com for krbtgt/
practichem.com(a)practichem.com, Additional pre-authentication required