On Fri, Jul 14, 2017 at 02:02:03AM -0000, patrick.mchale--- via FreeIPA-users wrote:
Hi,
I am getting an error logging into a FreeIPA server from a new FreeIPA client. I have
reset the password for the user using "kinit admin" but still no joy. Is there
another password that is needing to be set?.
Jul 14 13:53:41 ipa-client [sssd[krb5_child[2457]]]: Password has expired
Jul 14 13:53:41 ipa-client [sssd[krb5_child[2457]]]: Decrypt integrity check failed
Jul 14 13:54:40 ipa-client [sssd[krb5_child[2466]]]: Password has expired
Jul 14 13:54:40 ipa-client [sssd[krb5_child[2466]]]: Decrypt integrity check failed
sssd should have prompted you for the new password.. The "Decrypt
integrity check failed" sounds like the wrong password was entered,
though.
does kinit $user work?