Not connecting to the FreeIPA server?

On Monday, November 20, 2017 4:36 PM, Robbie Harwood via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:

Andrew Meyer via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:

[root@asm-rancid02 keytabs]# ipa-getkeytab -s asm-rancid02.mgt.asm.borg.local. -p radius/asm-rancid02.mgt.asm.borg.local -k /etc/krb5.keytab Unable to initialize STARTTLS session Failed to bind to server! Retrying with pre-4.0 keytab retrieval method... Unable to initialize STARTTLS session Failed to bind to server! Failed to get keytab [root@asm-rancid02 keytabs]#

Do I need to generate a keytab first?  Should this be generated when I add the server to the domain/realm?

This looks like it wasn't able to connect properly, so it hasn't reached the point where Kerberos is involved.

Keytabs are generated when the machine is enrolled in the realm.

Thanks, --Robbie _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org