Description of problem: ipa-client-install --fixed-primary --server ipa.cora.nwra.com --domain nwra.com Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operations and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes Hostname: barry.cora.nwra.com Realm: NWRA.COM DNS Domain: nwra.com IPA Server: ipa.cora.nwra.com BaseDN: dc=nwra,dc=com Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin Synchronizing time with KDC... Password for admin: Enrolled in IPA realm NWRA.COM Failed to obtain host TGT. Installation failed. Rolling back changes. IPA client is not configured on this system. Version-Release number of selected component: freeipa-client-3.1.0-2.fc18 Additional info: backtrace_rating: 4 cmdline: /usr/sbin/ipa-getkeytab -s ipa.cora.nwra.com -p host/barry.cora.nwra.com -k /etc/krb5.keytab crash_function: sasl_gss_encode executable: /usr/sbin/ipa-getkeytab kernel: 3.6.11-3.fc18.x86_64 remote_result: NOTFOUND uid: 0 Truncated backtrace: Thread no. 1 (10 frames) #0 sasl_gss_encode at /usr/lib64/sasl2/libgssapiv2.so #1 _sasl_encodev at /lib64/libsasl2.so.2 #2 sasl_encodev at /lib64/libsasl2.so.2 #3 sasl_encode at /lib64/libsasl2.so.2 #4 sb_sasl_cyrus_encode at cyrus.c:165 #5 sb_sasl_generic_write at sasl.c:773 #6 sb_debug_write at sockbuf.c:854 #7 ber_int_sb_write at sockbuf.c:445 #8 ber_flush2 at io.c:246 #9 ldap_int_flush_request at request.c:183
Created attachment 675032 [details] File: backtrace
Created attachment 675033 [details] File: build_ids
Created attachment 675034 [details] File: cgroup
Created attachment 675036 [details] File: core_backtrace
Created attachment 675038 [details] File: dso_list
Created attachment 675039 [details] File: environ
Created attachment 675041 [details] File: limits
Created attachment 675043 [details] File: maps
Created attachment 675044 [details] File: open_fds
Created attachment 675046 [details] File: proc_pid_status
Created attachment 675048 [details] File: var_log_messages
This is a bug in sasl library. This broken build since has been removed from updates-testing but you have not downgraded your version. See https://www.redhat.com/archives/freeipa-users/2013-January/msg00004.html for more details and https://fedorahosted.org/freeipa/ticket/3317 for a similar bug upstream.