[Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Janelle
Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "usera" they get a ticket as expected. However, if I login to a 6.6 client, it doesn't seem to work. Both were enrolled the same, obvio

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Dmitri Pal
On 05/04/2015 11:49 AM, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "usera" they get a ticket as expected. However, if I login to a 6.6 client, it doesn't seem to

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Simo Sorce
On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: > Happy Star Wars Day! > May the Fourth be with you! > > So I have a strange Kerberos problem trying to figure out. On a > CLIENT, (CentOS 7.1) if I login to account "usera" they get a ticket as > expected. However, if I login to a 6.6 client,

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Janelle
On 5/4/15 1:02 PM, Simo Sorce wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "usera" they get a ticket as expected. However,

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Nathaniel McCallum
On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: > Happy Star Wars Day! > May the Fourth be with you! > > So I have a strange Kerberos problem trying to figure out. On a > CLIENT, (CentOS 7.1) if I login to account "usera" they get a > ticket as > expected. However, if I login to a 6.6 clie

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Janelle
On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "usera" they get a ticket as expected. Ho

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Dmitri Pal
On 05/04/2015 09:22 PM, Janelle wrote: On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "u

Re: [Freeipa-users] interesting Kerberos issue

2015-05-04 Thread Janelle
On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "usera" they get a ticket as expected. Ho

Re: [Freeipa-users] interesting Kerberos issue

2015-05-05 Thread Dmitri Pal
On 05/04/2015 09:38 PM, Janelle wrote: On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT, (CentOS 7.1) if I login to account "u

Re: [Freeipa-users] interesting Kerberos issue

2015-05-10 Thread Janelle
On 5/5/15 6:47 AM, Dmitri Pal wrote: On 05/04/2015 09:38 PM, Janelle wrote: On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem trying to figure out. On a CLIENT,

Re: [Freeipa-users] interesting Kerberos issue

2015-05-11 Thread Alexander Bokovoy
On Sun, 10 May 2015, Janelle wrote: On 5/5/15 6:47 AM, Dmitri Pal wrote: On 05/04/2015 09:38 PM, Janelle wrote: On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be with you! So I have a strange Kerberos problem

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Janelle
On 5/10/15 11:57 PM, Alexander Bokovoy wrote: On Sun, 10 May 2015, Janelle wrote: On 5/5/15 6:47 AM, Dmitri Pal wrote: On 05/04/2015 09:38 PM, Janelle wrote: On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Happy Star Wars Day! May the Fourth be

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Alexander Bokovoy
On Mon, 18 May 2015, Janelle wrote: On 5/10/15 11:57 PM, Alexander Bokovoy wrote: On Sun, 10 May 2015, Janelle wrote: On 5/5/15 6:47 AM, Dmitri Pal wrote: On 05/04/2015 09:38 PM, Janelle wrote: On 5/4/15 6:06 PM, Nathaniel McCallum wrote: On Mon, 2015-05-04 at 08:49 -0700, Janelle wrote: Ha

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Nathaniel McCallum
On Mon, 2015-05-18 at 17:03 +0300, Alexander Bokovoy wrote: > On Mon, 18 May 2015, Janelle wrote: > > On 5/10/15 11:57 PM, Alexander Bokovoy wrote: > > > On Sun, 10 May 2015, Janelle wrote: > > > > On 5/5/15 6:47 AM, Dmitri Pal wrote: > > > > > On 05/04/2015 09:38 PM, Janelle wrote: > > > > > > On

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Alexander Bokovoy
On Mon, 18 May 2015, Nathaniel McCallum wrote: On Mon, 2015-05-18 at 17:03 +0300, Alexander Bokovoy wrote: On Mon, 18 May 2015, Janelle wrote: > On 5/10/15 11:57 PM, Alexander Bokovoy wrote: > > On Sun, 10 May 2015, Janelle wrote: > > > On 5/5/15 6:47 AM, Dmitri Pal wrote: > > > > On 05/04/2015

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Nathaniel McCallum
On Mon, 2015-05-18 at 17:18 +0300, Alexander Bokovoy wrote: > On Mon, 18 May 2015, Nathaniel McCallum wrote: > > On Mon, 2015-05-18 at 17:03 +0300, Alexander Bokovoy wrote: > > > On Mon, 18 May 2015, Janelle wrote: > > > > On 5/10/15 11:57 PM, Alexander Bokovoy wrote: > > > > > On Sun, 10 May 2015,

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Alexander Bokovoy
On Mon, 18 May 2015, Nathaniel McCallum wrote: On Mon, 2015-05-18 at 17:18 +0300, Alexander Bokovoy wrote: On Mon, 18 May 2015, Nathaniel McCallum wrote: > On Mon, 2015-05-18 at 17:03 +0300, Alexander Bokovoy wrote: > > On Mon, 18 May 2015, Janelle wrote: > > > On 5/10/15 11:57 PM, Alexander Bok

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Janelle
Ok, let me ask this a different way, because maybe there is a way, and I am just not seeing it. I have 2 datacenters with typical bastions in each. I have enabled OTP and that works fine via ssh. But the user has to login to both and opening ssh tunnels is problematic at best. Using all the cr

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Nathaniel McCallum
On Mon, 2015-05-18 at 09:45 -0500, Janelle wrote: > Ok, let me ask this a different way, because maybe there is a way, > and I am just not seeing it. > > I have 2 datacenters with typical bastions in each. I have enabled > OTP and that works fine via ssh. But the user has to login to both > and

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Janelle
> On May 18, 2015, at 09:47, Nathaniel McCallum wrote: > >> On Mon, 2015-05-18 at 09:45 -0500, Janelle wrote: >> Ok, let me ask this a different way, because maybe there is a way, >> and I am just not seeing it. >> >> I have 2 datacenters with typical bastions in each. I have enabled >> OTP a

Re: [Freeipa-users] interesting Kerberos issue

2015-05-18 Thread Janelle
On 5/18/15 7:47 AM, Nathaniel McCallum wrote: On Mon, 2015-05-18 at 09:45 -0500, Janelle wrote: Ok, let me ask this a different way, because maybe there is a way, and I am just not seeing it. I have 2 datacenters with typical bastions in each. I have enabled OTP and that works fine via ssh. But