md tabrez via FreeIPA-users wrote:
Hi Everyone, got an issue with our ipa server, users cannot login into there ipa account.
failed to initialize credentials using keytab [MEMORY:/ETC/KRB5.KEYTAB]: cannot contact any kdc for realm 'ABC.COM' unable to create GSSAPI-encrypted ldap connection
kerberos 5 kdc service status krb5kdc.service - Kerberos 5 KDC Loaded: loaded (/usr/lib/systemd/system/krb5kdc.service; disabled; vendor preset: disabled) Active: active (running) since Thu 2023-10-26 14:40:05 UTC; 2h 27min ago Process: 927 ExecStart=/usr/sbin/krb5kdc -P /run/krb5kdc.pid $KRB5KDC_ARGS (code=exited, status=0/SUCCESS) Main PID: 928 (krb5kdc) Tasks: 3 (limit: 9191) Memory: 11.4M CPU: 9.916s CGroup: /system.slice/krb5kdc.service ├─928 /usr/sbin/krb5kdc -P /run/krb5kdc.pid -w 2 ├─929 /usr/sbin/krb5kdc -P /run/krb5kdc.pid -w 2 └─930 /usr/sbin/krb5kdc -P /run/krb5kdc.pid -w 2
Oct 26 14:40:05 ipa.zerodha.com systemd[1]: Starting Kerberos 5 KDC... Oct 26 14:40:05 ipa.zerodha.com systemd[1]: krb5kdc.service: Can't open PID file /run/krb5kdc.pid (yet?) after start: Operation not permitted Oct 26 14:40:05 ipa.zerodha.com systemd[1]: Started Kerberos 5 KDC.
What does ipactl say the status of the services are? Does /run/krb5kdc.pid exist?
rob