lejeczek via FreeIPA-users wrote:
On 06/01/18 19:51, lejeczek via FreeIPA-users wrote:
Failed to obtain host TGT: Major (851968): Unspecified GSS failure. Minor code may provide more information, Minor (2529638936): Preauthentication failed
hi guys, I hit that error again. What I noticed is
- on that candidate client when I changed resolver to look only at
127.0.0.1(which was not running) and used --server & --domain (thus essentially no dns) then client installation succeeded. Would that be just a coincidence and DNS plays no role at this stage?
What I would recommend doing is leave DNS enabled and wait for a failed enrollment and see what master it is enrolling against. That should help narrow things down, especially if the failing master does not match the one you can force success with.
rob