Cannot authenticate using Kerberos after upgrading Red Hat Identity Management
Issue
-
After updating
ipa-server
to4.10.1-3
or newer, domain users cannot login anymore with Kerberos.$ kinit test Password for test@EXAMPLE.COM: kinit: Generic error (see e-text) while getting initial credentials
-
KDC logs in
/var/log/krb5kdc.log
might show the following error:May 25 10:19:05 idm.example.com krb5kdc[30843](info): AS_REQ (4 etypes {aes256-cts-hmac-sha1-96(18), aes256-cts-hmac-sha384-192(20), aes128-cts-hmac-sha256-128(19), aes128-cts-hmac-sha1-96(17)}) 127.0.0.1: HANDLE_AUTHDATA: test@EXAMPLE.COM for krbtgt/EXAMPLE.COM@EXAMPLE.COM, No such file or directory
Environment
- Red Hat Enterprise Linux Server (RHEL) 9
- Red Hat Identity Management (idM)
ipa-server-4.10.1-3.el9
and newer
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.