Hello Rob.
Thank you for your answer.
We are beginning a study to migrate to RHEL7 so I have hope for a new IPA version sooner or later :-).
The ipa master is on a VM and we dont have multi master yet.
Hm, I don't use by defaut this environment variable, maybe I should temporarily use it. When this problem occures and I retry the command.
Lune
lune voo via FreeIPA-users wrote:
> Hello everyone.
>
> I send you this mail because I have sometimes errors "Cannot contact any
> KDC for realm". When I retry it works fine. So this error is kind of random.
>
> I'm using Freeipa 3.0 in RHEL6.6 with sssd.
>
> I was wondering how to investigate this kind of error ?
>
> May I monitore some KPI from the KDC or check from logs ? Do you know
> which kind of logs I can check ?
You probably need to watch the SSSD logs. My guess would be DNS issues.
rob