lune voo via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
Hello everyone.
I send you this mail because I encountered a strange problem trying to set a password for a user I just created.
First, I created the user with ipa user-add and for the following result : Added user <myuser>
Then I added this user into a password policy group and it worked fine : Then I set a One Time Password for this account and it worked.
Finally I tried to set a complex password fitting the password policy with the kpasswd command. And here, I encountered the following error message : kpasswd: Client not found in Kerberos database getting initial ticket
My kpasswd command was like that : printf "%s\n%s\n%s" '<one_time_password>' '<password>' '<password>' | kpasswd <myuser>
It works fine usually, this is the first time I see this error message.
I wanted to ask you if you knew what this error message mean ? For me it is that the user does not exist, but I prefer ask you guys.
Correct. It's "unknown principal" - Kerberos went tried to look up the user on the server and got nothing.
The strange things is that, after that, I tried to ipa user-unlock the account, and it worked o_O.
Well, did kpasswd work after that?
Thanks, --Robbie