El dom, 02-11-2014 a las 19:54 +0100, John Obaterspok escribió:
> I have still not been able to logon to Win7 PC with my IPA user. > Currently I get "No mapping between account names and security IDs was > done" when I try to login. > What I've done is this: > 1. Created a dns entry for winpc + a host entry in web-ui, > 2. On the IPA server I ran "ipa-getkeytab -s <ipa.fqdn> -p > host/<ipa.fqdn> -e arcfour-hmac -k krb5.keytab.<winpc> -P > What I'm I suppose to do with the krb5.keytab.<winpc> file? Can't see > any mention of this? > On the Win PC I did: > 1. ksetup /setdomain [REALM NAME] > 2. ksetup /addkdc [REALM NAME] [ipa.fqdn] > 3. ksetup /addkpasswd [REALM NAME] [ipa.fqdn] > 4. ksetup /setcomputerpassword [MACHINE_PASSWORD] > 5. ksetup /mapuser * * The keytab is not needed, you just have to generate it to set a password for the computer. You are supposed to use the same password in ipa-getkeytab and in the "ksetup /setcomputerpassword" commands -- Loris Santamaria linux user #70506 xmpp:lo...@lgs.com.ve Links Global Services, C.A. http://www.lgs.com.ve Tel: 0286 952.06.87 Cel: 0414 095.00.10 sip:1...@lgs.com.ve ------------------------------------------------------------ "If I'd asked my customers what they wanted, they'd have said a faster horse" - Henry Ford
smime.p7s
Description: S/MIME cryptographic signature
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
