I must admit I don't know too much about troubleshooting kerberos, I just know that in your case its broken. Perhaps ask for help on on the FreeIPA users list as they are much more familiar with this than I am: freeipa-users@xxxxxxxxxxxxxxxxxxxxxx On 03/23/2018 10:40 AM, Sergei Gerasenko wrote: > Also, and I don’t know if it’s strange, but I get that kinit error on any IPA host. I have a 2-master VM environment and trying kinit -k -t /etc/dirsrv/ds.keytab gives the same error back — but they are replicating without issues. > _______________________________________________ > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx