Morning! That's my log entry. PCAP attached.
Feb 21 08:12:57 ldap krb5kdc[4314]: AS_REQ (1 etypes {23}) 150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption type
My /etc/krb5.conf
[libdefaults]
default_realm = GSR.INPE.BR
allow_weak_crypto = yes
default_tkt_enctypes = rc4-hmac des-cbc-md5
default_tgs_enctypes = rc4-hmac des-cbc-md5
[realms]
GSR.INPE.BR = {
master_kdc = GSR.INPE.BR
kdc = kerberos.gsr.inpe.br
default_domain = gsr.inpe.br
}
[domain_realm]
.gsr.inpe.br = GSR.INPE.BR
gsr.inpe.br = GSR.INPE.BR
[logging]
kdc = SYSLOG:INFO
Is it sufice?
On 02/21/2013 06:48 AM, Yair Zaslavsky wrote:
Please provide info also on the IPA server you are using (use rpm -qa for that) ----- Original Message -----From: "Yaniv Kaul" <yk...@redhat.com> To: "Eduardo Ramos" <edua...@freedominterface.org> Cc: users@ovirt.org Sent: Thursday, February 21, 2013 11:14:41 AM Subject: Re: [Users] ovirt kerberos/ldap ----- Original Message -----Hi all! I'm trying to link a ldap/kerberos to my ovirt without success. I'm stuck with this: oVirt engine: # engine-manage-domains -action=add -domain=gsr.inpe.br -user=admin/admin -interactive -provider=IPA Enter password: Error: exception message: KDC has no support for encryption type (14) - BAD_ENCRYPTION_TYPEPlease snoop the connection between the engine and the IPA server. Port 88, full packets ('-s 1500' on tcpdump), into file ('-w /tmp/kerb.pcap' ). Y.Failure while testing domain gsr.inpe.br. Details: Kerberos error. Please check log for further details. kdc log: Feb 20 18:02:55 ldap krb5kdc[4314]: AS_REQ (1 etypes {23}) 150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption type Any sugestion? _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
kerb.pcap
Description: Binary data
libssh2-1.2.2-11.el6_3.x86_64 setup-2.8.14-16.el6.noarch libxml2-2.7.6-8.el6_3.4.x86_64 basesystem-10.0-4.el6.noarch libtalloc-2.0.1-1.1.el6.x86_64 ca-certificates-2010.63-3.el6_1.5.noarch libtdb-1.2.1-3.el6.x86_64 libcollection-0.6.0-9.el6.x86_64 nss-softokn-freebl-3.12.9-11.el6.x86_64 libldb-0.9.10-23.el6.x86_64 perl-version-0.77-127.el6.x86_64 bash-4.1.2-9.el6_2.x86_64 perl-Pod-Simple-3.13-127.el6.x86_64 libcap-2.16-5.5.el6.x86_64 perl-5.10.1-127.el6.x86_64 info-4.13a-8.el6.x86_64 perl-XML-SAX-0.96-7.el6.noarch chkconfig-1.3.49.3-2.el6.x86_64 perl-Compress-Raw-Zlib-2.020-127.el6.x86_64 libacl-2.2.49-6.el6.x86_64 perl-URI-1.40-2.el6.noarch audit-libs-2.2-2.el6.x86_64 perl-Compress-Zlib-2.020-127.el6.x86_64 db4-4.7.25-17.el6.x86_64 perl-Digest-SHA1-2.12-2.el6.x86_64 readline-6.0-4.el6.x86_64 perl-Convert-ASN1-0.22-1.el6.noarch libselinux-2.0.94-5.3.el6.x86_64 perl-HTML-Parser-3.64-2.el6.x86_64 glib2-2.22.5-7.el6.x86_64 perl-Net-SSLeay-1.35-9.el6.x86_64 shadow-utils-4.1.4.2-13.el6.x86_64 perl-GSSAPI-0.26-5.el6.x86_64 perl-Text-Iconv-1.7-6.el6.x86_64 libstdc++-4.4.6-4.el6.x86_64 libpath_utils-0.2.1-9.el6.x86_64 file-libs-5.04-13.el6.x86_64 perl-libwww-perl-5.833-2.el6.noarch libtool-ltdl-2.2.6-15.5.el6.x86_64 xz-libs-4.999.9-0.3.beta.20091007git.el6.x86_64 make-3.81-20.el6.x86_64 lua-5.1.4-4.1.el6.x86_64 libref_array-0.1.1-9.el6.x86_64 iproute-2.6.32-20.el6.x86_64 c-ares-1.7.0-6.el6.x86_64 elfutils-libelf-0.152-1.el6.x86_64 sssd-1.8.0-32.el6.x86_64 perl-LDAP-0.40-1.el6.noarch libtirpc-0.2.1-5.el6.x86_64 vim-common-7.2.411-1.8.el6.x86_64 pcre-7.8-4.el6.x86_64 vim-enhanced-7.2.411-1.8.el6.x86_64 findutils-4.4.2-6.el6.x86_64 gpg-pubkey-0608b895-4bd22942 libselinux-utils-2.0.94-5.3.el6.x86_64 apr-1.3.9-5.el6_2.x86_64 bzip2-1.0.5-7.el6_0.x86_64 apr-util-ldap-1.3.9-3.el6_0.1.x86_64 pth-2.0.7-9.3.el6.x86_64 httpd-2.2.15-15.el6.centos.1.x86_64 expat-2.0.1-11.el6_2.x86_64 php-cli-5.3.3-14.el6_3.x86_64 dbus-glib-0.86-5.el6.x86_64 lighttpd-1.4.31-1.el6.x86_64 iptables-ipv6-1.4.7-5.1.el6_2.x86_64 upstart-0.6.5-12.el6.x86_64 xinetd-2.3.14-35.el6_3.x86_64 nss-softokn-3.12.9-11.el6.x86_64 krb5-appl-clients-1.0.1-7.el6_2.1.x86_64 libusb-0.1.12-23.el6.x86_64 xz-4.999.9-0.3.beta.20091007git.el6.x86_64 grubby-7.0.15-3.el6.x86_64 man-1.6f-30.el6.x86_64 libutempter-1.1.5-4.1.el6.x86_64 strace-4.5.19-1.11.el6_3.2.x86_64 tar-1.23-7.el6.x86_64 nmap-5.51-2.el6.x86_64 krb5-libs-1.9-33.el6_3.3.x86_64 e2fsprogs-libs-1.41.12-12.el6.x86_64 krb5-appl-servers-1.0.1-7.el6_2.1.x86_64 pinentry-0.7.6-6.el6.x86_64 krb5-workstation-1.9-33.el6_3.3.x86_64 m4-1.4.13-5.el6.x86_64 diffutils-2.8.1-28.el6.x86_64 libedit-2.11-4.20080712cvs.1.el6.x86_64 groff-1.18.1.4-21.el6.x86_64 coreutils-libs-8.4-19.el6.x86_64 cracklib-2.8.16-4.el6.x86_64 coreutils-8.4-19.el6.x86_64 hwdata-0.233-7.8.el6.noarch rpcbind-0.2.0-9.el6.x86_64 libhbalinux-1.0.13-1.el6.x86_64 fipscheck-1.2.0-7.el6.x86_64 gnupg2-2.0.14-4.el6.x86_64 curl-7.19.7-26.el6_2.4.x86_64 rpm-4.8.0-27.el6.x86_64 libuser-0.56.13-5.el6.x86_64 gdbm-1.8.0-36.el6.x86_64 pciutils-libs-3.1.4-11.el6.x86_64 ethtool-2.6.33-0.3.el6.x86_64 libcap-ng-0.6.4-3.el6_0.1.x86_64 python-iniparse-0.3.1-2.1.el6.noarch python-urlgrabber-3.9.1-8.el6.noarch pygpgme-0.1-18.20090824bzr68.el6.x86_64 yum-plugin-fastestmirror-1.1.30-14.el6.noarch slang-2.2.1-1.el6.x86_64 newt-python-0.52.11-3.el6.x86_64 libsemanage-2.0.43-4.1.el6.x86_64 libnl-1.1-14.el6.x86_64 libaio-0.3.107-10.el6.x86_64 centos-release-6-3.el6.centos.9.x86_64 policycoreutils-2.0.83-19.24.el6.x86_64 nfs-utils-lib-1.1.5-4.el6.x86_64 kbd-misc-1.15-11.el6.noarch libdrm-2.4.25-2.el6.x86_64 kernel-2.6.32-279.el6.x86_64 fcoe-utils-1.0.22-3.el6.x86_64 cryptsetup-luks-1.2.0-7.el6.x86_64 bfa-firmware-3.0.0.0-1.el6.noarch libcgroup-0.37-4.el6.x86_64 yum-presto-0.6.2-1.el6.noarch system-config-firewall-base-1.2.27-5.el6.noarch passwd-0.77-4.el6_2.2.x86_64 e2fsprogs-1.41.12-12.el6.x86_64 vim-minimal-7.2.411-1.8.el6.x86_64 attr-2.4.44-7.el6.x86_64 ql2500-firmware-5.06.05-1.el6.noarch ql2200-firmware-2.02.08-3.1.el6.noarch ql23xx-firmware-3.03.27-3.1.el6.noarch tzdata-2012j-1.el6.noarch glibc-common-2.12-1.80.el6_3.7.x86_64 nss-util-3.13.6-1.el6_3.x86_64 nss-sysinit-3.13.6-2.el6_3.x86_64 libuuid-2.17.2-12.7.el6_3.x86_64 libblkid-2.17.2-12.7.el6_3.x86_64 initscripts-9.03.31-2.el6.centos.1.x86_64 device-mapper-libs-1.02.74-10.el6_3.3.x86_64 device-mapper-event-libs-1.02.74-10.el6_3.3.x86_64 openssh-5.3p1-81.el6_3.x86_64 device-mapper-event-1.02.74-10.el6_3.3.x86_64 kpartx-0.4.9-56.el6_3.1.x86_64 python-2.6.6-29.el6_3.3.x86_64 cyrus-sasl-lib-2.1.23-13.el6_3.1.x86_64 dhcp-common-4.1.1-31.0.1.P1.el6.centos.1.x86_64 selinux-policy-3.7.19-155.el6_3.14.noarch kernel-2.6.32-279.22.1.el6.x86_64 selinux-policy-targeted-3.7.19-155.el6_3.14.noarch device-mapper-multipath-0.4.9-56.el6_3.1.x86_64 lvm2-2.02.95-10.el6_3.3.x86_64 openssh-server-5.3p1-81.el6_3.x86_64 libgcc-4.4.6-4.el6.x86_64 dbus-libs-1.2.24-7.el6_3.x86_64 filesystem-2.4.30-3.el6.x86_64 redhat-logos-60.0.14-12.el6.centos.noarch libtevent-0.9.8-8.el6.x86_64 ncurses-base-5.7-3.20090208.el6.x86_64 libunistring-0.9.3-5.el6.x86_64 libipa_hbac-1.8.0-32.el6.x86_64 perl-Pod-Escapes-1.04-127.el6.x86_64 ncurses-libs-5.7-3.20090208.el6.x86_64 perl-Module-Pluggable-3.90-127.el6.x86_64 libattr-2.4.44-7.el6.x86_64 perl-libs-5.10.1-127.el6.x86_64 zlib-1.2.3-27.el6.x86_64 perl-XML-NamespaceSupport-1.10-3.el6.noarch popt-1.13-7.el6.x86_64 perl-XML-LibXML-1.70-5.el6.x86_64 libcom_err-1.41.12-12.el6.x86_64 perl-IO-Compress-Base-2.020-127.el6.x86_64 perl-IO-Compress-Zlib-2.020-127.el6.x86_64 bzip2-libs-1.0.5-7.el6_0.x86_64 perl-XML-Filter-BufferText-1.01-8.el6.noarch perl-Digest-HMAC-1.01-22.el6.noarch libsepol-2.0.41-4.el6.x86_64 perl-HTML-Tagset-3.20-4.el6.noarch gamin-0.1.10-9.el6.x86_64 perl-Net-LibIDN-0.12-3.el6.x86_64 sed-4.2.1-10.el6.x86_64 perl-IO-Socket-SSL-1.31-2.el6.noarch gawk-3.1.7-9.el6.x86_64 perl-Authen-SASL-2.13-2.el6.noarch perl-XML-SAX-Writer-0.50-8.el6.noarch sqlite-3.6.20-1.el6.x86_64 mailcap-2.1.31-2.el6.noarch libgpg-error-1.7-4.el6.x86_64 cyrus-sasl-gssapi-2.1.23-13.el6_3.1.x86_64 tcp_wrappers-libs-7.6-57.el6.x86_64 portreserve-0.0.4-9.el6.x86_64 sssd-client-1.8.0-32.el6.x86_64 iptables-1.4.7-5.1.el6_2.x86_64 libini_config-0.6.1-9.el6.x86_64 libidn-1.18-2.el6.x86_64 libdhash-0.4.2-9.el6.x86_64 keyutils-libs-1.4-4.el6.x86_64 openldap-servers-2.4.23-26.el6_3.2.x86_64 libgssglue-0.1-11.el6.x86_64 openldap-clients-2.4.23-26.el6_3.2.x86_64 libgcrypt-1.4.5-9.el6_2.2.x86_64 gpm-libs-1.20.6-12.el6.x86_64 grep-2.6.3-3.el6.x86_64 epel-release-6-8.noarch net-tools-1.60-110.el6_2.x86_64 php-common-5.3.3-14.el6_3.x86_64 checkpolicy-2.0.22-1.el6.x86_64 apr-util-1.3.9-3.el6_0.1.x86_64 httpd-tools-2.2.15-15.el6.centos.1.x86_64 sysvinit-tools-2.87-4.dsf.el6.x86_64 php-ldap-5.3.3-14.el6_3.x86_64 libhbaapi-2.2-14.el6.x86_64 php-5.3.3-14.el6_3.x86_64 keyutils-1.4-4.el6.x86_64 phpldapadmin-1.2.3-1.el6.noarch libnih-1.0.1-7.el6.x86_64 file-5.04-13.el6.x86_64 gmp-4.3.1-7.el6_2.2.x86_64 bash-completion-1.3-5.el6.noarch libconfig-1.3.2-1.1.el6.x86_64 xz-lzma-compat-4.999.9-0.3.beta.20091007git.el6.x86_64 MAKEDEV-3.24-6.el6.x86_64 psmisc-22.6-15.el6_0.1.x86_64 libpcap-1.0.0-6.20091201git117cb5.el6.x86_64 procps-3.2.8-23.el6.x86_64 db4-utils-4.7.25-17.el6.x86_64 krb5-server-1.9-33.el6_3.3.x86_64 libss-1.41.12-12.el6.x86_64 tcpdump-4.0.0-3.20090921gitdf3cb4.2.el6.x86_64 binutils-2.20.51.0.2-5.34.el6.x86_64 which-2.19-6.el6.x86_64 ncurses-5.7-3.20090208.el6.x86_64 less-436-10.el6.x86_64 gzip-1.3.12-18.el6.x86_64 cracklib-dicts-2.8.16-4.el6.x86_64 pam-1.1.1-10.el6_2.1.x86_64 module-init-tools-3.9-20.el6.x86_64 plymouth-scripts-0.8.3-24.el6.centos.x86_64 libpciaccess-0.12.1-1.el6.x86_64 fipscheck-lib-1.2.0-7.el6.x86_64 libcurl-7.19.7-26.el6_2.4.x86_64 gpgme-1.1.8-3.el6.x86_64 rpm-libs-4.8.0-27.el6.x86_64 deltarpm-3.5-0.5.20090913git.el6.x86_64 logrotate-3.7.8-15.el6.x86_64 mingetty-1.08-5.el6.x86_64 plymouth-core-libs-0.8.3-24.el6.centos.x86_64 dash-0.5.5.1-3.1.el6.x86_64 libffi-3.0.5-3.2.el6.x86_64 python-pycurl-7.19.0-8.el6.x86_64 yum-metadata-parser-1.1.2-16.el6.x86_64 rpm-python-4.8.0-27.el6.x86_64 yum-3.2.29-30.el6.centos.noarch newt-0.52.11-3.el6.x86_64 ustr-1.0.4-9.1.el6.x86_64 bridge-utils-1.2-9.el6.x86_64 libevent-1.4.13-4.el6.x86_64 iputils-20071127-16.el6.x86_64 nfs-utils-1.2.3-26.el6.x86_64 cryptsetup-luks-libs-1.2.0-7.el6.x86_64 iscsi-initiator-utils-6.2.0.872-41.el6.x86_64 kbd-1.15-11.el6.x86_64 plymouth-0.8.3-24.el6.centos.x86_64 aic94xx-firmware-30-2.el6.noarch rsyslog-5.8.10-2.el6.x86_64 authconfig-6.1.12-10.el6.x86_64 grub-0.97-77.el6.x86_64 efibootmgr-0.5.4-10.el6.x86_64 audit-2.2-2.el6.x86_64 xfsprogs-3.1.1-7.el6.x86_64 acl-2.2.49-6.el6.x86_64 ql2100-firmware-1.19.38-3.1.el6.noarch ql2400-firmware-5.06.05-1.el6.noarch rootfiles-8.1-6.1.el6.noarch gpg-pubkey-c105b9de-4e0fd3a3 glibc-2.12-1.80.el6_3.7.x86_64 nspr-4.9.2-0.el6_3.1.x86_64 nss-3.13.6-2.el6_3.x86_64 libudev-147-2.42.el6.x86_64 openssl-1.0.0-25.el6_3.1.x86_64 cpio-2.10-11.el6_3.x86_64 util-linux-ng-2.17.2-12.7.el6_3.x86_64 udev-147-2.42.el6.x86_64 device-mapper-1.02.74-10.el6_3.3.x86_64 dracut-004-284.el6_3.1.noarch dracut-kernel-004-284.el6_3.1.noarch lvm2-libs-2.02.95-10.el6_3.3.x86_64 python-libs-2.6.6-29.el6_3.3.x86_64 nss-tools-3.13.6-2.el6_3.x86_64 device-mapper-multipath-libs-0.4.9-56.el6_3.1.x86_64 dhclient-4.1.1-31.0.1.P1.el6.centos.1.x86_64 kernel-firmware-2.6.32-279.22.1.el6.noarch lldpad-0.9.43-20.el6_3.x86_64 dracut-network-004-284.el6_3.1.noarch openldap-2.4.23-26.el6_3.2.x86_64 openssh-clients-5.3p1-81.el6_3.x86_64
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
