Hi all,
So, I have been working on creating certificates for services on a solid installation of
FreeIPA on a machine we have.
I did everything that this blog stated to do...
https://blog.christophersmart.com/2014/08/24/creating-certs-and-keys-for-...
But now when I enter the command, sudo ipa-getcert list.
The status is CA_UNCONFIGURED, ca-error is "Error setting up ccache for
"host" service on client using default keytab: Preauthentication failed.",
stuck is yes.
I checked the krb5.keytab it's set to -rw------- and root:root.
I'm not sure what else I can do to address the problem. Any help would be
appreciated.
Thanks!