so, what do you see in /var/log/ipaclient-install.log?
On Sun, Mar 29, 2020 at 9:34 AM Faraz Younus <farazby(a)gmail.com> wrote:
Yes I double checked password is ok on both sides
On Sun, Mar 29, 2020 at 12:21 PM Natxo Asenjo via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
>
>
> On Sun, Mar 29, 2020 at 8:10 AM Faraz Younus via FreeIPA-users <
> freeipa-users(a)lists.fedorahosted.org> wrote:
>
>> Hi Team,
>>
>> command: /usr/sbin/ipa-client-install --domain
example.com
>> --mkhomedir --password abc123 " --server
ipa9.example.com --unattended
>>
>> e, "cmd": ["/usr/sbin/ipa-client-install",
"--domain", "
>> fixedandmobile.com", "--mkhomedir", "--password",
"abc123", "--server",
>> "ipa9.example.com", "--unattended"], "delta":
"0:01:03.451321", "end":
>> "2020-03-29 05:57:22.013451", "msg": "non-zero return
code", "rc": 1,
>> "start": "2020-03-29 05:56:18.562130", "stderr":
"Hostname:
>> ipacentos.example.com\nRealm: EXAMPLE.COM\nDNS Domain: example.com\nIPA
>> Server: ipa9.example.com\nBaseDN: dc=example,dc=com\nSynchronizing time
>> with KDC...\nUnable to sync time with IPA NTP server, assuming the time is
>> in sync. Please check that 123 UDP port is opened.\nOTP case, CA cert
>> preexisted, use it\nJoining realm failed: Incorrect
>> password.\n\nInstallation failed. Rolling back changes.\nIPA client is not
>> configured on this system.", "stderr_lines": ["Hostname:
>> ipacentos.example.com", "Realm:EXAMPLE.COM", "DNS Domain:
example.com",
>> "IPA Server: ipa9.example.com", "BaseDN: dc=example,dc=com",
>> "Synchronizing time with KDC...", "Unable to sync time with IPA
NTP server,
>> assuming the time is in sync. Please check that 123 UDP port is opened.",
>> "OTP case, CA cert preexisted, use it", "Joining realm failed:
Incorrect
>> password.", "", "Installation failed. Rolling back
changes.", "IPA client
>> is not configured on this system."], "stdout":
"\u001b[?1034h",
>> "stdout_lines": ["\u001b[?1034h"]}
>>
>
>
> it does say 'incorrect password', did you check that?
>
> --
> Groeten,
> natxo
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>