I'm not sure what's printing Done! either
Here is a fresh kinit and klist afterwards
[gola-us@test-nfs-prod-1 ~]$ kinit gola-us Password for gola-us@test.LOCAL:
Done! New ticket is stored in cache file /home/rusers/gola-us/krb5cc_gola-us [gola-us@test-nfs-prod-1 ~]$ klist
Credentials cache: /home/rusers/gola-us/krb5cc_gola-us Default principal: gola-us@test.LOCAL Number of entries: 1
[1] Service principal: krbtgt/test.LOCAL@test.LOCAL Valid starting: Wednesday, November 15, 2017 at 4:03:26 PM Expires: Thursday, November 16, 2017 at 4:03:26 PM
Thanks, Carl Gola
From: Robbie Harwood via FreeIPA-users freeipa-users@lists.fedorahosted.org To: Carl Gola via FreeIPA-users freeipa-users@lists.fedorahosted.org, FreeIPA users list freeipa-users@lists.fedorahosted.org Cc: Carl Gola gola@us.ibm.com, Robbie Harwood rharwood@redhat.com Date: 11/15/2017 08:58 AM Subject: [Freeipa-users] Re: ERROR: did not receive Kerberos credentials
Carl Gola via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
Receiving the following error when trying to run ipa commands
[gola-us@test-nfs-prod-1 ~]$ kinit gola-us Password for gola-us@test.LOCAL:
Done!
What's printing "Done!" here? kinit doesn't do that that I'm aware.
New ticket is stored in cache file /home/rusers/gola-us/krb5cc_gola-us
What happens if you klist this file after kinit?
Thanks, --Robbie (See attached file: signature.asc) _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
"Carl Gola" gola@us.ibm.com writes:
I'm not sure what's printing Done! either
Here is a fresh kinit and klist afterwards
[gola-us@test-nfs-prod-1 ~]$ kinit gola-us Password for gola-us@test.LOCAL:
Done! New ticket is stored in cache file /home/rusers/gola-us/krb5cc_gola-us [gola-us@test-nfs-prod-1 ~]$ klist
Credentials cache: /home/rusers/gola-us/krb5cc_gola-us Default principal: gola-us@test.LOCAL Number of entries: 1
[1] Service principal: krbtgt/test.LOCAL@test.LOCAL Valid starting: Wednesday, November 15, 2017 at 4:03:26 PM Expires: Thursday, November 16, 2017 at 4:03:26 PM
Hmm, this doesn't look like MIT krb5; what is it? ( `rpm --info -qf $(which kinit)` or `apt show $(dpkg -S $(which kinit) | awk -F: '{print $1}')` depending on what OS you're on.)
Does Kerberos issue a service ticket as part of the user-find command, or does it not get that far? (klist, and server logs will tell this.)
Thanks, --Robbie
freeipa-users@lists.fedorahosted.org