ipa-client-install fails with error "* gss_init_sec_context() failed : : KDC policy rejects request".

Solution Verified - Updated -

Issue

IPA-Client installation fails with below error

* upload completely sent off: 479 out of 479 bytes
< HTTP/1.1 401 Unauthorized
< Date: Tue, 04 Apr 2017 19:59:42 GMT
< Server: Apache/2.4.6 (Red Hat Enterprise Linux) mod_auth_gssapi/1.4.0 mod_nss/1.0.14 NSS/3.21 Basic ECC mod_wsgi/3.4 Python/2.7.5
* gss_init_sec_context() failed: : KDC policy rejects request       
< WWW-Authenticate: Negotiate
< X-Frame-Options: DENY
< Content-Security-Policy: frame-ancestors 'none'
< Last-Modified: Tue, 31 Jan 2017 13:33:11 GMT
< Accept-Ranges: bytes
< Content-Length: 1474
< Content-Type: text/html; charset=UTF-8
< 
* Connection #0 to host ipa1.example.com left intact
HTTP response code is 401, not 200

2017-04-04T19:59:42Z ERROR Joining realm failed: XML-RPC CALL:

Environment

  • Red Hat Enterprise Linux 7
  • ipa-client-4.4.0-14.el7_3.1.1.x86_64
  • IPA 4.4.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.