Hello all, 

I am testing Free IPA server for use under a test environment, so far smooth 
sailing and have it up and running, no problems. 

The problem is occurring during client installation. I have installed the 
ipa-client package on a clean CentOS 7 OS. When I execute ipa-client-install... 
I get the following: 

 Client hostname: centostest.mydomain.com 
 Realm: MYDOMAIN.COM 
 DNS Domain: mydomain.com 
 IPA Server: ldap.mydomain.com 
 BaseDN: dc=mydomain,dc=com 

 Continue to configure the system with these values? [no]: yes 
 Skipping synchronizing time with NTP server. 
 User authorized to enroll computers: admin 
 Password for ad...@mydomain.com: 
 Successfully retrieved CA cert 
 Subject: CN=Certificate Authority,O=MYDOMAIN.COM 
 Issuer: CN=Certificate Authority,O=MYDOMAIN.COM 
 Valid From: Wed Jul 13 13:12:08 2016 UTC 
 Valid Until: Sun Jul 13 13:12:08 2036 UTC 

 Joining realm failed: HTTP response code is 403, not 200 

 Installation failed. Rolling back changes. 
 IPA client is not configured on this system. 

I can't make sense of why I'd be seeing a 403 error.  I've done my share of 
searching but have not found a similar issue.  Some have report 401 errors in 
some circumstances, but not 403.

Has anyone seen this before.

Thanks,
Rubin

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to