ipa-join on F-15 is not forwarding the kerberos credentials as we requested causing the ipa-join call to fail.
We are issuing a forwardable ticket, it isn't being sent to the remote server (or the remote server isn't saving it, haven't determined which yet).
Confirmed, client isn't sending it. From the Apache error log:
[Thu Jul 07 14:47:45 2011] [debug] src/mod_auth_kerb.c(1351): [client 192.168.0.33] Client didn't delegate us their credential
This is due to CVE-2001-2192, see bug https://bugzilla.redhat.com/show_bug.cgi?id=711454
curl bug: https://bugzilla.redhat.com/show_bug.cgi?id=719939 xmlrpc-c bug: https://bugzilla.redhat.com/show_bug.cgi?id=719950
master: a1c690c
Metadata Update from @rcritten: - Issue assigned to mkosek - Issue set to the milestone: FreeIPA 2.1 - 2011/07
Login to comment on this ticket.