lejeczek via FreeIPA-users wrote:
On 06/01/18 19:51, lejeczek via FreeIPA-users wrote:
> Failed to obtain host TGT: Major (851968): Unspecified GSS failure.
> Minor code may provide more information, Minor (2529638936):
> Preauthentication failed
hi guys,
I hit that error again. What I noticed is
- on that candidate client when I changed resolver to look only at
127.0.0.1(which was not running) and used --server & --domain (thus
essentially no dns) then client installation succeeded.
Would that be just a coincidence and DNS plays no role at this stage?
What I would recommend doing is leave DNS enabled and wait for a failed
enrollment and see what master it is enrolling against. That should help
narrow things down, especially if the failing master does not match the
one you can force success with.
rob