Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Dec 2022 03:58:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 268186] Kerberos authentication fails with a Linux/FreeIPA KDC
Message-ID:  <bug-268186-227-1bF9NJX3oA@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-268186-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268186

--- Comment #49 from amendlik@gmail.com ---
As I've mentioned several times, I have this entire infrastructure working
perfectly. The only thing I had to do was force FreeIPA to issue type-18
tickets. The only issue I've run into is with the newer encryption types.

The procedure to add a FreeBSD host is as follows:

1) Create the host manually on the FreeIPA server
     ipa host-add --force client1.example.com

2) Export the keytab on the FreeIPA server
     ipa-getkeytab -p host/<fqdn>@<REALM> -k /tmp/<hostname>.keytab

3) Copy the keytab file to the FreeBSD system at /etc/krb5.keytab - mode 600

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-268186-227-1bF9NJX3oA>