IPA: Client install error "Server not found in Kerberos database"

Solution Verified - Updated -

Issue

  • IPA client install error
gss_init_sec_context() failed:: Server HTTP/ipaserver@EXAMPLE.COM not found in Kerberos database< WWW-Authenticate: Negotiate HTTP response code is 401, not 200
  • IPA client install debug error
args=/usr/sbin/ipa-join -s ipaserver.example.com -b dc=example,dc=com -d
stdout=
stderr=XML-RPC CALL:
.....
* Connected to ipaserver.example.com (ipaddress) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*  CAfile: /etc/ipa/ca.crt
   CAPath: none
....
< HTTP/1.1 401 Authorization Required
< Date: Sat, 27 Jun 2015 09:24:50 GMT
< Server: Apache
*gss_init_sec_context() failed: : Server HTTP/ipaserver@EXAMPLE.COM not found int Kerberos database< WWW-Authenticate: Negotiate
...
* Expire cleared
* Closing connectoin #0
HTTP response code is 401, not 200

Joining realm failed: XML-RPC CALL:

Environment

  • Red Hat Enterprise Linux 6
  • IPA

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content