On Thu, 2019-07-04 at 12:52 +0200, Alessio wrote:
I was testing joining an Active Directory from Rawhide.
Following QA:Testcase realmd join sssd
While with F30 it works, in Rawhide I get:
$ sudo realm join TEST.LAN
Password for Administrator:
See: journalctl REALMD_OPERATION=r92.1155
realm: Couldn't join realm: Failed to join the domain
In journalctl the error seems to be:
Jul 04 12:45:18 fetora realmd[1151]: adcli: 'code == 0' not true at
_adcli_krb5_keytab_test_salt
Jul 04 12:45:18 fetora realmd[1151]: ! Couldn't authenticate with
keytab while discovering which salt to use: FEDORA$(a)TEST.LAN: Bad
encryption type
Jul 04 12:45:18 fetora realmd[1151]: ! Couldn't add keytab entries:
FILE:/etc/krb5.keytab: Bad encryption type
Jul 04 12:45:18 fetora realmd[1151]: adcli: joining domain fgm.lan
failed: Couldn't add keytab entries: FILE:/etc/krb5.keytab: Bad
encryption type
Jul 04 12:45:18 fetora realmd[1151]: ! Failed to join the domain
The content of file /etc/krb5.conf.d/crypto-policies is the same
between F30 and Rawhide.
Thanks for catching this! Can you please file a bug against realmd or
adcli and mark it as blocking the bug 'BetaBlocker'? Thanks again.
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net