Unable to initialize ipa-client getting stderr=kinit: Improper format of Kerberos configuration file while initializing Kerberos 5 library

Solution Verified - Updated -

Issue

  • Getting below error in ipa-client-install.log
2018-07-18T19:14:18Z DEBUG Starting external process
2018-07-18T19:14:18Z DEBUG args=/usr/bin/kinit tuser@TEST.EXAMPLE.COM -c /tmp/krbccZKoqwv/ccache
2018-07-18T19:14:18Z DEBUG Process finished, return code=1
2018-07-18T19:14:18Z DEBUG stdout=
2018-07-18T19:14:18Z DEBUG stderr=kinit: Improper format of Kerberos configuration file while initializing Kerberos 5 library

2018-07-18T19:14:18Z INFO Please make sure the following ports are opened in the firewall settings:
     TCP: 80, 88, 389
     UDP: 88 (at least one of TCP/UDP ports 88 has to be open)
Also note that following ports are necessary for ipa-client working properly after enrollment:
     TCP: 464
     UDP: 464, 123 (if NTP enabled)

Environment

  • RHEL
  • IPA

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.