<div dir="ltr"><div class="gmail_default" style="font-size:small"><br clear="all"></div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style><div class="gmail_default" style="font-size:small">Below are the details of my installation, both without firewall and selinux disabled.</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small"> <br></div><div class="gmail_default" style="font-size:small">####################################### IPA SERVER</div><div class="gmail_default" style="font-size:small">Hostname: ipa1.din.intranet</div><div class="gmail_default" style="font-size:small">IP Addr: 10.30.0.25</div><div class="gmail_default" style="font-size:small">Release: CentOS release 6.6 (Final) x86_64</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">###################################### oVirt Engine Version: 3.5.0.1-1.el6</div><div class="gmail_default" style="font-size:small">Hostname: sequoia.din.intranet</div><div class="gmail_default" style="font-size:small">IP Addr: 10.30.0.27</div><div class="gmail_default" style="font-size:small">Release: CentOS release 6.6 (Final) x86_64</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small"> <br></div><div class="gmail_default" style="font-size:small">######################################</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">[root@sequoia ~]# host -t SRV _ldap._tcp.din.intranet</div><div class="gmail_default" style="font-size:small">_ldap._tcp.din.intranet has SRV record 0 100 389 ipa1.din.intranet.</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">[root@sequoia ~]# host -t SRV _kerberos._tcp.din.intranet</div><div class="gmail_default" style="font-size:small">_kerberos._tcp.din.intranet has SRV record 0 100 88 ipa1.din.intranet.</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">[root@sequoia ~]# host -t SRV _kerberos._udp.din.intranet</div><div class="gmail_default" style="font-size:small">_kerberos._udp.din.intranet has SRV record 0 100 88 ipa1.din.intranet.</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">[root@sequoia ~]# host -t SRV _kpasswd._udp.din.intranet</div><div class="gmail_default" style="font-size:small">_kpasswd._udp.din.intranet has SRV record 0 100 464 ipa1.din.intranet.</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">[root@sequoia ~]# host -t A ipa1.din.intranet</div><div class="gmail_default" style="font-size:small">ipa1.din.intranet has address 10.30.0.25</div><div class="gmail_default" style="font-size:small"> </div><div class="gmail_default" style="font-size:small">[root@sequoia ~]# ldapsearch -x -b "dc=din, dc=intranet" uid=admin</div><div class="gmail_default" style="font-size:small">extended LDIF</div><div class="gmail_default" style="font-size:small">LDAPv3<br></div><div class="gmail_default" style="font-size:small">base <dc=din, dc=intranet> with scope subtree</div><div class="gmail_default" style="font-size:small">filter: uid=admin </div><div class="gmail_default" style="font-size:small">requesting: ALL </div><div class="gmail_default" style="font-size:small">admin, users, compat, din.intranet<br></div><div class="gmail_default" style="font-size:small">dn: uid=admin,cn=users,cn=compat,dc=din,dc=intranet</div><div class="gmail_default" style="font-size:small">admin, users, accounts, din.intranet<br></div><div class="gmail_default" style="font-size:small">dn: uid=admin,cn=users,cn=accounts,dc=din,dc=intranet</div><div style="font-size:small">uid: admin <br></div><div style><div style>krbPrincipalName: admin@DIN.INTRANET </div><div style>cn: Administrator </div><div style>sn: Administrator </div><div style>uidNumber: 1250800000</div><div style>gidNumber: 1250800000</div><div style>homeDirectory: /home/admin</div><div style>loginShell: /bin/bash</div><div style>gecos: Administrator</div><div style>search result</div><div style>search: 2</div><div style>result: 0 Success</div><div style>numResponses: 3<br></div><div style>numEntries: 2</div><div style> </div><div style> </div><div style>[root@sequoia ~]# getent passwd admin</div><div style>admin:*:1250800000:1250800000:Administrator:/home/admin:/bin/bash</div><div style> </div><div style> </div><div style>[root@sequoia ~]# klist</div><div style>Ticket cache: FILE:/tmp/krb5cc_0</div><div style>Default principal: admin@DIN.INTRANET</div><div style> </div><div style>Valid starting Expires Service principal</div><div style>10/29/14 15:37:46 10/30/14 15:37:45 krbtgt/DIN.INTRANET@DIN.INTRANET</div><div style> </div><div style> </div><div style>[root@sequoia ~]# engine-manage-domains add --domain=din.intranet --provider=ipa --user=admin</div><div style>Enter password:</div><div style>Error: exception message: ipa1.din.intranet.</div><div style>Failure while testing domain din.intranet. Details: Kerberos error. Please check log for further details.</div><div style> </div><div style> </div><div style>######################################</div><div style> </div><div style> </div><div style>[root@ipa1 ~]# tail -f /var/log/krb5kdc.log</div><div style><br></div><div style>Oct 29 15:25:22 ipa1.din.intranet krb5kdc[2007](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.30.0.27">10.30.0.27</a>: NEEDED_PREAUTH: host/sequoia.din.uem.br@DIN.INTRANET for krbtgt/DIN.INTRANET@DIN.INTRANET, Additional pre-authentication required</div><div style>Oct 29 15:25:22 ipa1.din.intranet krb5kdc[2006](info): AS_REQ (4 etypes {18 17 16 23}) <a href="http://10.30.0.27">10.30.0.27</a>: ISSUE: authtime 1414603522, etypes {rep=18 tkt=18 ses=18}, host/sequoia.din.uem.br@DIN.INTRANET for krbtgt/DIN.INTRANET@DIN.INTRANET</div><div style>Oct 29 15:25:22 ipa1.din.intranet krb5kdc[2007](info): TGS_REQ (4 etypes {18 17 16 23}) <a href="http://10.30.0.27">10.30.0.27</a>: ISSUE: authtime 1414603522, etypes {rep=18 tkt=18 ses=18}, host/sequoia.din.uem.br@DIN.INTRANET for ldap/ipa1.din.intranet@DIN.INTRANET</div><div style> </div><div style>###################################### </div><div style> </div><div style>Why engine-manage-domains does not work?</div></div><div style="font-size:small"><br></div></div><div class="gmail_default" style="font-size:small"><br></div><div><br></div>-- <br>Ao encaminhar esta mensagem, por favor:<br>1. Apague o meu e-mail e o meu nome.<br>2. Apague também os endereços dos amigos antes de reenviar<br>3. Use Cco ou Bcc para enviar mensagens!<br>Dificulte a disseminação de vírus e spam.
</div>