[Freeipa-users] Unable to enrol servers with principal

[Dmitri Pal]

On 02/08/2013 07:47 PM, Charlie Derwent wrote:
> Hi
>  
> Whenever I attempt an unattended installation with a principal and
> password. The installation fails.
>  
> I'm using the following syntax for my command
>  
> ipa-client-install --domain=example.com <http://example.com>
> --server=ipa.example.com <http://ipa.example.com> --realm=EXAMPLE.COM
> <http://EXAMPLE.COM> --principal=user --password=pass -U
> --ntp-server=123.123.123.123 --mkhomedir
> --hostname=server1.example.com <http://server1.example.com>
>  
> The error I get varies between (in order of frequency)
>  
> Joining realm failed: /usr/sbin/ipa-join: symbol lookup error:
> /usr/sbin/ipa-join: undefined symbol: xmlrpc_server_info_set_user
>  
> and
>  
> kinit(v5): Password incorrect while getting initial credentials
>  
> and
>  
> Password expired. you must change it now.
> kinit(v5): Cannot read password while getting initial credentials
>  
> The password is 100% right as I can kinit on other servers and access
> the webgui with the same details.
>  
> OTP's work flawlessly.
>  
> ipa-client = tried with 2.1.3-1.el5 and 2.1.3-5.el5_9.2 (RHEL 5.8)
>  
> ipa-server = 2.2.0-16.el6  (RHEL 6.3)

I assume this happens on the newly installed system...
Is the time on the system correct?

>  
> Thanks,
> Charlie
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130208/6a357ecc/attachment.htm>