SSSD 服务失败并显示错误 'Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]:preauthentication failed.'
Issue
SSSD
服务失败。- RHEL 系统被配置为使用
SSSD
的 AD 客户端,且 AD 用户无法登录到系统。 /var/log/messages
文件充满了以下重复的日志消息:
Mar 13 08:36:18 testserver [sssd[ldap_child[145919]]]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Preauthentication failed. Unable to create GSSAPI-encrypted LDAP connection.
Environment
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Active Directory
- realmd
- adcli
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.