[Freeipa-users] Re: Unable to Login using LDAP User

[Sumit Bose]

Am Wed, May 11, 2022 at 08:47:49AM -0000 schrieb Damola Azeez via FreeIPA-users:
>  Hi,
>  
>  below is the output of ipa host-show epmtestapp
>  
>  
>  Host name: epmtestapp.xxx
>    Platform: x86_64
>    Operating system: 4.1.12-124.16.4.el6uek.x86_64
>    Certificate: ---
>    Subject: CN=epmtestapp.xxx,O=XXX
>    Serial Number: 13
>    Serial Number (hex): 0xD
>    Issuer: CN=Certificate Authority,O=XXX
>    Not Before: Tue May 10 13:28:34 2022 UTC
>    Not After: Fri May 10 13:28:34 2024 UTC
>    Fingerprint (SHA1): ---
>    Fingerprint (SHA256): ---
>    Principal name: host/epmtestapp.xxx@XXX
>    Principal alias: host/epmtestapp.xxx@XXX
>    SSH public key fingerprint: SHA256:--- (ssh-rsa), SHA256:--- (ssh-dss)
>    Password: False
>    Member of Sudo rule: dba team
>    Keytab: True
>    Managed by: epmtestapp.xxx 
Hi,

this looks good. Please try on the client

    KRB5_TRACE=/dev/stdout kinit -k 'host/epmtestapp.xxx@XXX'

and send the output?

bye,
Sumit

>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure