Am Tue, May 10, 2022 at 02:17:18PM -0000 schrieb Damola Azeez via FreeIPA-users:
> I've installed FreeIPA on all host I manage and everything has been fine 
> until today when had to reboot the whole hosts. Every other host worked 
> except one. checking the log file of the server, i saw the below error 
> 
> "[sssd[ldap_child[44316]]]: Client 'host/xxx@XXX' not found in Kerberos 
> database"
> 
> I've tried uninstalling the IP client and reinstalling it but i still have 
> the same issue.

Hi,

is there a chance that the client got a hostname assigned via DHCP which
is different from the name at the time the client joined the FreeIPA
domain?

It might be possible to fix this by taking the hostname part from the
'klist -k' output, it's between '/' and '@' in the principal
'host/[email protected]' and add it to the [domain/...]
section in sssd.conf as

    ipa_hostname = fully.qualified.hostname

ans restart SSSD.

HTH

bye,
Sumit

> 
> Host: oracle linux 6.9
> IPA server: IPA, version: 4.9.6
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam on the list, report it: 
> https://pagure.io/fedora-infrastructure
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to