On Sun, Jun 6, 2021 at 11:09 AM lejeczek via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:
> Hi guys. > > I'm trying client install and I fail: > ... > Time synchronization was successful. > Please make sure the following ports are opened in the > firewall settings: > TCP: 80, 88, 389 > UDP: 88 (at least one of TCP/UDP ports 88 has to be open) > Also note that following ports are necessary for ipa-client > working properly after enrollment: > TCP: 464 > UDP: 464, 123 (if NTP enabled) > Installation failed. Rolling back changes. > Disabling client Kerberos and LDAP configurations > nscd daemon is not installed, skip configuration > nslcd daemon is not installed, skip configuration > Client uninstall complete. > Kerberos authentication failed: kinit: Improper format of > Kerberos configuration file while initializing Kerberos 5 > library > > This is the client's problem right? Reason I'm bit doubtful > is such that all the usual places I made sure are > plain-vanilla. What do I miss? > Hi, do you have any krb5 config snippet defined in /etc/krb5.conf.d or /var/lib/sss/pubconf/krb5.include.d/? /etc/krb5.conf includes these directories and they may contain a file with syntax errors. flo > many thanks, L. > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure >
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure