FreeIPA: kinit error

I am using Locky 9.5.
I installed FreeIPA, but I am having trouble with the following error.

(if I put in the wrong password)
[root@rocky ~]# kinit username
Password for username@XXXXXX.COM:.
kinit: Password incorrect while getting initial credentials

(if you put in the correct password)
[root@rocky ~]# kinit username
Password for username@XXXXXX.COM:
kinit: Generic error (see e-text) while getting initial credentials

Why do I get an error even if I put in the correct password?
What should I do to solve this problem and how?


himori

If this is a brand new installation, you should not be having these issues. Is this a standard install? Did you turn off or on any settings during or after installation?

With those questions in mind, you need to start troubleshooting by piping the kerberos debug into stderr.

% KRB5_TRACE=/dev/stderr kinit username@REALM

This will produce output for you to read through to help you determine your next steps in troubleshooting.

Solved!

ipa user-del username

ipa user-add username --password

kinit username

It’s OK!

Thank you for your advise.

Recreating users is not a necessary requirement,
It appears that the following information has been performed and the user is now able to log in.