I got error trying to enable FreeIPA authentication via Katello-Installer to authenticate Satellite web UI users using FreeIPA

Solution Verified - Updated -

Issue

  • I try to configure Satellite to authenticate against FreeIPA but i got the following error.
# katello-installer --foreman-ipa-authentication true --foreman-configure-ipa-repo

 /bin/echo Get keytab           && KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k           && KRB5CCNAME=KEYRING:session:get-http-service-keytab /usr/sbin/ipa-getkeytab -s data.example.com -k /etc/httpd/conf/http.keytab -p HTTP/katello.example.com           && kdestroy -c KEYRING:session:get-http-service-keytab returned 9 instead of one of [0]
 /Stage[main]/Foreman::Config/Exec[ipa-getkeytab]/returns: change from notrun to 0 failed: /bin/echo Get keytab           && KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k           && KRB5CCNAME=KEYRING:session:get-http-service-keytab /usr/sbin/ipa-getkeytab -s data.example.com -k /etc/httpd/conf/http.keytab -p HTTP/katello.example.com           && kdestroy -c KEYRING:session:get-http-service-keytab returned 9 instead of one of [0]
 /Stage[main]/Foreman::Config/Exec[ipa-getkeytab]: Failed to call refresh: /bin/echo Get keytab           && KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k           && KRB5CCNAME=KEYRING:session:get-http-service-keytab /usr/sbin/ipa-getkeytab -s data.example.com -k /etc/httpd/conf/http.keytab -p HTTP/katello.example.com           && kdestroy -c KEYRING:session:get-http-service-keytab returned 9 instead of one of [0]
 /Stage[main]/Foreman::Config/Exec[ipa-getkeytab]: /bin/echo Get keytab           && KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k           && KRB5CCNAME=KEYRING:session:get-http-service-keytab /usr/sbin/ipa-getkeytab -s data.example.com -k /etc/httpd/conf/http.keytab -p HTTP/katello.example.com           && kdestroy -c KEYRING:session:get-http-service-keytab returned 9 instead of one of [0]
Installing             Done                                               [100%] [.......................................................]
  Something went wrong! Check the log for ERROR-level output
  The full log is at /var/log/katello-installer/katello-installer.log

Environment

Satellite 6.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content