Hi Frederic, I see that there was an unwanted space in one of the commands I provided, sorry about that: ipa-getkeytab -r -p ' HTTP/ipa4.lix.polytechnique...@lix.polytechnique.fr' -D cn=directory\ manager -w Secret123 -k /tmp/gssproxy.keytab
(just between the opening ' and HTTP). Please retry without this space: ipa-getkeytab -r -p 'HTTP/ipa4.lix.polytechnique...@lix.polytechnique.fr' -D cn=directory\ manager -w Secret123 -k /tmp/gssproxy.keytab flo On Mon, Feb 24, 2025 at 10:19 AM Frederic Ayrault <f...@lix.polytechnique.fr> wrote: > Bonjour, > > Le 30/01/2025 à 21:11, Frederic Ayrault via FreeIPA-users a écrit : > > Bonsoir, > > > > > > Le 30/01/2025 à 20:58, Rob Crittenden a écrit : > >> Frederic Ayrault via FreeIPA-users wrote: > >>> Le 30/01/2025 à 13:48, Florence Blanc-Renaud a écrit : > >>> > >>>> try kinit with this one. > >> Can you show us the exact command you used? > > > > I tried this one : > > > > KRB5_TRACE=/dev/stderr kinit -kt /tmp/gssproxy.keytab > > HTTP/ipa4.lix.polytechnique...@lix.polytechnique.fr > > is this the correct command ? > > if not, what should I try ? > > and if it is the good one, do you have an idea what is the problem ? > > > > >> rob > > > > Thank you > > > > Regards, > > > > Frederic > > > >> > >>> but this fails > >>> > >>> [13189] 1738244077.982026: Resolving unique ccache of type KEYRING > >>> [13189] 1738244077.982027: Getting initial credentials for > >>> HTTP/ipa4.lix.polytechnique...@lix.polytechnique.fr > >>> [13189] 1738244077.982028: Looked up etypes in keytab: (empty) > >>> [13189] 1738244077.982029: Getting initial credentials for > >>> HTTP/ipa4.lix.polytechnique...@lix.polytechnique.fr > >>> [13189] 1738244077.982030: Looked up etypes in keytab: (empty) > >>> kinit: Keytab contains no suitable keys for > >>> HTTP/ipa4.lix.polytechnique...@lix.polytechnique.fr while getting > >>> initial credentials > >>> > > > > Thank you for your help > > Regards, > > Frederic > > >
-- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
