[Freeipa-users] Unable to enrol servers with principal

[Charlie Derwent]

Yes the times on the ipa server and ipa client are in sync with our NTP
source

Thanks
Charlie


On Sat, Feb 9, 2013 at 1:07 AM, Dmitri Pal <dpal at redhat.com> wrote:

>  On 02/08/2013 07:47 PM, Charlie Derwent wrote:
>
>  Hi
>
> Whenever I attempt an unattended installation with a principal and
> password. The installation fails.
>
> I'm using the following syntax for my command
>
> ipa-client-install --domain=example.com --server=ipa.example.com --realm=
> EXAMPLE.COM --principal=user --password=pass -U
> --ntp-server=123.123.123.123 --mkhomedir --hostname=server1.example.com
>
> The error I get varies between (in order of frequency)
>
> Joining realm failed: /usr/sbin/ipa-join: symbol lookup error:
> /usr/sbin/ipa-join: undefined symbol: xmlrpc_server_info_set_user
>
> and
>
>  kinit(v5): Password incorrect while getting initial credentials
>
>  and
>
>  Password expired. you must change it now.
>  kinit(v5): Cannot read password while getting initial credentials
>
> The password is 100% right as I can kinit on other servers and access the
> webgui with the same details.
>
>  OTP's work flawlessly.
>
>  ipa-client = tried with 2.1.3-1.el5 and 2.1.3-5.el5_9.2 (RHEL 5.8)
>
> ipa-server = 2.2.0-16.el6  (RHEL 6.3)
>
>
> I assume this happens on the newly installed system...
> Is the time on the system correct?
>
>
> Thanks,
>  Charlie
>
>
> _______________________________________________
> Freeipa-users mailing listFreeipa-users at redhat.comhttps://www.redhat.com/mailman/listinfo/freeipa-users
>
>
>
> --
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager for IdM portfolio
> Red Hat Inc.
>
>
> -------------------------------
> Looking to carve out IT costs?www.redhat.com/carveoutcosts/
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130209/b643dd1d/attachment.htm>