5,084 reputation
1029
bio website alexclear.livejournal.com
location Mother Russia
age 36
visits member for 3 years, 5 months
seen 2 days ago

An experienced software developer with a bit of sysadmin background. Can't dance.


1d
awarded  Popular Question
2d
awarded  Nice Answer
2d
awarded  Nice Question
Jul
2
awarded  Curious
Jun
30
accepted FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
Jun
30
comment FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
Yes! That was it, thank you very much! Command-line tools started to work as soon as I commented out that setting.
Jun
30
revised FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
added 108 characters in body
Jun
30
revised FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
adding /etc/krb5.conf
Jun
30
comment FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
Sure, and the web UI works well.
Jun
30
comment FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
Unfortunately nothing gets added to this log when I run ipa ... but I noticed that ipa command tried to open a /var/kerberos/krb5/user/8800000/client.keytab file but the system did not have it. So, it looks like a keytab problem.
Jun
30
revised FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
added 435 characters in body
Jun
30
comment FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
There is only a single server actually, it's Fedora 19 w/all the latest updates, so this is FreeIPA 3.3.5
Jun
30
asked FreeIPA: command-line tools do not work, 'No Kerberos credentials available'
Jun
30
accepted Can't change password of FreeIPA admin - “Current password's minimum life has not expired”
Jun
30
comment Can't change password of FreeIPA admin - “Current password's minimum life has not expired”
Do these settings apply back to accounts which were created prior to policy modification? My current global password policy is 900 days of max lifetime and 2400 hours of min lifetime. I think the admin account had a default max lifetime of 90 days initially. So if it was remembered on account creation and not synchronized later when we set a new max lifetime the old max got lower than the new min!
Jun
30
revised Can't change password of FreeIPA admin - “Current password's minimum life has not expired”
added 3 characters in body
Jun
30
asked Can't change password of FreeIPA admin - “Current password's minimum life has not expired”
Jun
17
asked CARP Virtual IP does not ping in virtualized environment
Jun
4
awarded  Popular Question
Feb
1
awarded  Yearling