[Bug 268186] Kerberos authentication fails with a Linux/FreeIPA KDC

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 22 Dec 2022 03:58:58 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268186

--- Comment #49 from amendlik@gmail.com ---
As I've mentioned several times, I have this entire infrastructure working
perfectly. The only thing I had to do was force FreeIPA to issue type-18
tickets. The only issue I've run into is with the newer encryption types.

The procedure to add a FreeBSD host is as follows:

1) Create the host manually on the FreeIPA server
     ipa host-add --force client1.example.com

2) Export the keytab on the FreeIPA server
     ipa-getkeytab -p host/<fqdn>@<REALM> -k /tmp/<hostname>.keytab

3) Copy the keytab file to the FreeBSD system at /etc/krb5.keytab - mode 600

-- 
You are receiving this mail because:
You are the assignee for the bug.