Josh via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org> writes:
On 05/10/2018 10:26 AM, Rob Crittenden wrote:
> Josh via FreeIPA-users wrote:
>> Greetings,
>>
>> I am trying to follow steps at
https://kb.iu.edu/d/aumh to create
>> freeipa admin keytab to use in some scripts but getting an error
>>
>> kinit: Preauthentication failed while getting initial credentials
>
> This is usually Kerberos's way of saying "bad password".
>
>>
>> Does anyone know what I am missing here?
>
> You are FAR better off using ipa-getkeytab for obtaining keytabs IMHO.
>
> Either way were I to guess someone reset the admin password sometime
> after getting the keytab which changed the keys.
none changed password because I am the only user.
any other suggestions to diagnose this process?
Destroy the keytab. Recreate using ipa-getkeytab.
If that doesn't fix it, please provide both `klist -ek /path/to.keytab`
and `KRB5_TRACE=/dev/stderr kinit -k /path/to.keytab`.
Thanks,
--Robbie