How to update krb5.keytab file on RHEL system using 'adcli' utility without re-joining the system to AD domain
Issue
-
How to update
krb5.keytab
file on RHEL system usingadcli
utility without re-joining the system to AD domain. -
AD user lookup & authentication is failing via SSSD:
Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Preauthentication failed.
kinit -k
is failing with following error:Preauthentication failed while getting initial credentials
[root@rhel8-test ~]# kinit -k 'RHEL8-TEST$'
kinit: Preauthentication failed while getting initial credentials
Environment
- Red Hat Enterprise Linux 7, 8, 9
- Microsoft Active Directory
- realmd
- adcli
- SSSD
- kerberos
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.