Resolution:AD user cannot log in RHEL 8.6- Error: No KCM server found
Issue
-
When server was RHEL 7.9 AD users could log in. Once server was upgraded to RHEL 8.6 AD users no longer can login.
-
This error is observed in
/var/log/sssd/krb5_child.log:
(2023-03-17 18:29:58): [krb5_child[2276]] [create_ccache] (0x0020): [RID#18] 1001: [-1750600181][No KCM server found]
********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE:
* (2023-03-17 18:29:58): [krb5_child[2276]] [get_and_save_tgt] (0x2000): [RID#18] Running as [1840638513][1840600513].
* (2023-03-17 18:29:58): [krb5_child[2276]] [sss_get_ccache_name_for_principal] (0x4000): [RID#18] Location: [KCM:]
* (2023-03-17 18:29:58): [krb5_child[2276]] [sss_get_ccache_name_for_principal] (0x2000): [RID#18] krb5_cc_cache_match failed: [-1750600181][No KCM server found]
* (2023-03-17 18:29:58): [krb5_child[2276]] [create_ccache] (0x0020): [RID#18] 1001: [-1750600181][No KCM server found]
Environment
- Red Hat Enterprise Linux integrates directly with Active Directory
- Upgraded from RHEL 7.9 to RHEL 8.6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.