On ma, 06 marras 2017, Sigbjorn Lie via FreeIPA-users wrote:
RHEL/CentOS 5.11 clients does not seem to work with IPA 4.5 unless I go
from sssd-ipa to sssd-ldap. I would prefer to continue to use sssd-ipa
to allow the existing HBAC rules to function.
Is there a known workaround to get EL 5.11 clients to work with IPA 4.5
[root@ipaclient sssd]# kinit -kt /etc/krb5.keytab
kinit(v5): Preauthentication failed while getting initial credentials
Uninstall pkinit-nss if you have it installed. Restart sssd.
/ Alexander Bokovoy