Am Wed, May 11, 2022 at 03:10:06PM -0000 schrieb Damola Azeez via FreeIPA-users:
Hi Sumit, Thanks for the assistance.
Please find the ldap_child.log file in the link below
https://pastebin.com/pKp1tvCt
Hi,
thanks for the log. It looks like the KDC with the IP address
192.168.101.160 knows about the client and can return a ticket, similar
as with manual 'kinit -k'.
There are other KDCs with IP addresses 192.168.100.231, 192.168.100.232
and 192.168.103.24 which are returning 'Client not found in Kerberos
database'. Do those IP addresses belong to other IPA servers?
Are all those 4 addresses listed when you call
dig -t SRV _kerberos._tcp.xxx
where 'xxx' is the IPA dns domain which you have sanitized out?
bye,
Sumit
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure