Robbie Harwood via FreeIPA-users wrote:
Marisa Sandhoff via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org>
writes:
> [18/Mar/2019:14:36:27.577557647 +0100] - ERR - set_krb5_creds - Could
> not get initial credentials for principal
> [ldap/ipa2.pleiades.uni-wuppertal.de(a)PLEIADES.UNI-WUPPERTAL.DE] in
> keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328324 (Generic error (see
> e-text))
Can you inspect this keytab? `klist -ekt /etc/dirsrv/ds.keytab`?
Those errors are normal. 389-ds was rather chatty about starting up when
it doesn't have a ccache.
You should look at the CA logs in /var/log/pki/pki-tomcat/ca
To bring IPA up without the CA to limp along while you diagnose the
problem run: ipactl start --ignore-service-failures
rob