FreeIPA服务器错误 - ipa:错误:服务器响应中没有有效的Negotiate标头

时间:2017-12-14 16:15:35

标签: kerberos freeipa

我最近在RHEL7上安装了FreeIPA。这似乎运行了几个小时,然后调用ipa开始失败,出现以下错误。

ipa: ERROR: No valid Negotiate header in server response
================================================== 
[root ~]# ipa -v user-find --all 
ipa: INFO: trying https://xxx.xxx.xxx.xxx/ipa/json
ipa: INFO: [try 1]: Forwarding 'user_find/1' to json server 'https://xxx.xxx.xxx.xxx/ipa/json'
ipa: ERROR: No valid Negotiate header in server response
-=================================================

[I have masked the hostnames with 'xxx']

在/ var / log / httpd / error_log中 - 我看到以下错误。

[Thu Dec 14 15:50:23.413286 2017] [auth_gssapi:error] [pid 10694] [client xxx.xxx.xxx.xxx:50198] GSS ERROR In Negotiate Auth: gss_accept_sec_context() failed: [Unspecified GSS failure.  Minor code may provide more information ( Request ticket server HTTP/xxx.xxxx.xxxx.xxx@EC2.INTERNAL kvno 2 not found in keytab; keytab is likely out of date)], referer: https://xxx.xxx.xxx.xxx/ipa/xml

可能的原因是什么?看起来有些误配置。

0 个答案:

没有答案