On pe, 11 touko 2018, Josh wrote:
On 05/11/2018 01:19 AM, Alexander Bokovoy wrote:
>On to, 10 touko 2018, Josh via FreeIPA-users wrote:
>>Server certificate has expired and all ipa utilities fail.
>>Could you please stay on topic and explain if you can why ktutil
>>can't be used as described in
https://kb.iu.edu/d/aumh?
>>Does ipa makes ktutil not functional?
>No, it does not. Without seeing what exactly you did, it is not easy to
>help you. Aside from a password, a KVNO value and encryption types
>specified when creating a key play important role. If you use wrong
>values, the key would be different to what KDC expects.
>
A message with exact steps "Is being held until the list moderator can
review it for approval." since 05/09/2018 11:25 PM so I just uploaded
it to
https://pastebin.com/Yp0Yie32 Can you show output of
kinit admin
kvno admin
klist -ef
I suspect your admin password did change over time so it has a different
kvno value than what you have used in ktutil's addent (-k 1).
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland