On Sun, Jun 6, 2021 at 11:09 AM lejeczek via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:

> Hi guys.
>
> I'm trying client install and I fail:
> ...
> Time synchronization was successful.
> Please make sure the following ports are opened in the
> firewall settings:
>       TCP: 80, 88, 389
>       UDP: 88 (at least one of TCP/UDP ports 88 has to be open)
> Also note that following ports are necessary for ipa-client
> working properly after enrollment:
>       TCP: 464
>       UDP: 464, 123 (if NTP enabled)
> Installation failed. Rolling back changes.
> Disabling client Kerberos and LDAP configurations
> nscd daemon is not installed, skip configuration
> nslcd daemon is not installed, skip configuration
> Client uninstall complete.
> Kerberos authentication failed: kinit: Improper format of
> Kerberos configuration file while initializing Kerberos 5
> library
>
> This is the client's problem right? Reason I'm bit doubtful
> is such that all the usual places I made sure are
> plain-vanilla. What do I miss?
>

Hi,
do you have any krb5 config snippet defined in /etc/krb5.conf.d or
/var/lib/sss/pubconf/krb5.include.d/? /etc/krb5.conf includes these
directories and they may contain a file with syntax errors.
flo

> many thanks, L.
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to