Home / server / Questions / 909822
In Process
ali haider
Asked: 2018-04-29 09:12:18 +0800 CST

kerberos setup with freeipa installation

  • 772

I tried installing freeipa on ubuntu v16 (cloud server) using the following:

  1. modified /etc/host to use the private IP address of the virtual machine and the corresponding host (the A name has propagated)

  2. ran the freeipa-server installation:

    sudo apt-get intall freeipa-server

I added the host information etc. in the responses. After the installation, I ran the following:

kinit admin

However, I get the following error:

 Cannot contact any KDC for realm 'CORRECT.HOST.COM' while getting initial credentials

I checked the realm setup in /etc/krb5.conf file and I can see the host specified there:

default_realm = CORRECT.HOST.COM

[realms]
    CORRECT.HOST.COM = {
        kdc = CORRECT.HOST.COM:88
        admin_server = CORRECT.HOST.COM
    }

I tried modifying the host name to lowercase (as well as the port number). However, the kinit command does not work.

KRB5_TRACE=/dev/stdout kinit admin
[30263] 1524933806.532808: Getting initial credentials for [email protected]
[30263] 1524933806.536715: Sending request (185 bytes) to CORRECT.HOST.COM
[30263] 1524933806.537110: Resolving hostname correct.host.com
[30263] 1524933806.537618: Sending initial UDP request to dgram 10.132.61.210:88
[30263] 1524933806.537806: Initiating TCP connection to stream 10.132.61.210:88
[30263] 1524933806.537942: Terminating TCP connection to stream 10.132.61.210:88
kinit: Cannot contact any KDC for realm 'CORRECT.HOST.COM' while getting initial credentials

Any thoughts on how to troubleshoot this further (preferably installing on an ubuntu v16 server and not fedora)

kerberos

0 Answers