Attachment 919655 Details for Bug 1117991 – Pastebin contents from Description

Pastebin contents from Description

220582.txt (text/plain), 3.66 KB, created by Martin Kosek on 2014-07-21 14:52:50 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Kosek

Created: 2014-07-21 14:52:50 UTC

Size: 3.66 KB

patch

obsolete

>The logfile "tail -f krb5kdc.log" shows each step below the output to screen.
>
>[root@spiceipa ~]# ipa user-add
>First name: Test
>Last name: Account
>User login [taccount]: test
>-----------------
>Added user "test"
>-----------------
>  User login: test
>  First name: Test
>  Last name: Account
>  Full name: Test Account
>  Display name: Test Account
>  Initials: TA
>  Home directory: /home/test
>  GECOS field: Test Account
>  Login shell: /bin/sh
>  Kerberos principal: test@SPICE.ML2.ENG.BOS.REDHAT.COM
>  Email address: test@spice.ml2.eng.bos.redhat.com
>  UID: 1929000027
>  GID: 1929000027
>  Password: False
>  Kerberos keys available: False
>[root@spiceipa ~]# 
>
>Jul 09 14:48:26 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): TGS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: ISSUE: authtime 1404931192, etypes {rep=18 tkt=18 ses=18}, rhevadmin@SPICE.ML2.ENG.BOS.REDHAT.COM for HTTP/spiceipa.spice.ml2.eng.bos.redhat.com@SPICE.ML2.ENG.BOS.REDHAT.COM
>Jul 09 14:48:26 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): TGS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: ISSUE: authtime 1404931192, etypes {rep=18 tkt=18 ses=18}, HTTP/spiceipa.spice.ml2.eng.bos.redhat.com@SPICE.ML2.ENG.BOS.REDHAT.COM for ldap/spiceipa.spice.ml2.eng.bos.redhat.com@SPICE.ML2.ENG.BOS.REDHAT.COM
>Jul 09 14:48:26 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): ... CONSTRAINED-DELEGATION s4u-client=rhevadmin@SPICE.ML2.ENG.BOS.REDHAT.COM
>
>
>[root@spiceipa ~]# ipa user-mod --password
>User login: test
>Password: 
>Enter Password again to verify: 
>--------------------
>Modified user "test"
>--------------------
>  User login: test
>  First name: Test
>  Last name: Account
>  Home directory: /home/test
>  Login shell: /bin/sh
>  Email address: test@spice.ml2.eng.bos.redhat.com
>  UID: 1929000027
>  GID: 1929000027
>  Account disabled: False
>  Password: True
>  Member of groups: ipausers
>  Kerberos keys available: True
>
>
>Jul 09 14:49:12 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): TGS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: ISSUE: authtime 1404931192, etypes {rep=18 tkt=18 ses=18}, HTTP/spiceipa.spice.ml2.eng.bos.redhat.com@SPICE.ML2.ENG.BOS.REDHAT.COM for ldap/spiceipa.spice.ml2.eng.bos.redhat.com@SPICE.ML2.ENG.BOS.REDHAT.COM
>Jul 09 14:49:12 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): ... CONSTRAINED-DELEGATION s4u-client=rhevadmin@SPICE.ML2.ENG.BOS.REDHAT.COM
>
>
>[root@spiceipa ~]# kinit test
>Password for test@SPICE.ML2.ENG.BOS.REDHAT.COM: 
>Password expired.  You must change it now.
>Enter new password: 
>Enter it again: 
>kinit: Password has expired while getting initial credentials
>[root@spiceipa ~]# 
>
>Jul 09 14:49:32 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): AS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: CLIENT KEY EXPIRED: test@SPICE.ML2.ENG.BOS.REDHAT.COM for krbtgt/SPICE.ML2.ENG.BOS.REDHAT.COM@SPICE.ML2.ENG.BOS.REDHAT.COM, Password has expired
>Jul 09 14:49:32 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): AS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: NEEDED_PREAUTH: test@SPICE.ML2.ENG.BOS.REDHAT.COM for kadmin/changepw@SPICE.ML2.ENG.BOS.REDHAT.COM, Additional pre-authentication required
>Jul 09 14:49:38 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): AS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: ISSUE: authtime 1404931778, etypes {rep=18 tkt=18 ses=18}, test@SPICE.ML2.ENG.BOS.REDHAT.COM for kadmin/changepw@SPICE.ML2.ENG.BOS.REDHAT.COM
>Jul 09 14:49:49 spiceipa.spice.ml2.eng.bos.redhat.com krb5kdc[1576](info): AS_REQ (4 etypes {18 17 16 23}) 10.19.168.13: CLIENT KEY EXPIRED: test@SPICE.ML2.ENG.BOS.REDHAT.COM for krbtgt/SPICE.ML2.ENG.BOS.REDHAT.COM@SPICE.ML2.ENG.BOS.REDHAT.COM, Password has expired

Actions: View

Attachments on bug 1117991: 919655