Automatic installation of the packages required to join the system to the domain. There is already trust relation between domains. Cause: No KDC responded in the requested realm. You can usually omit the root DSE portion of distinguished name. Cannot contact any KDC for realm 'MYDOMAIN.COM' while getting initial credentials. Enter passwords Actual results: "kpasswd: Cannot contact any KDC for requested realm changing password" Expected results: kpasswd sends a change password request to the kadmin server. $ kinit user@test.com Password for user@test.com: kinit: KDC reply did not match expectations while getting initial credentials Solution: Ensure your krb5 file is… If you increase the KDC timeout, increase the LDAP discovery timeout. Configure /etc/ssh/sshd_config file to include the following lines:. Cannot contact any KDC for realm 'IPA.LOCAL' while getting initial credentials [***@server1 read]# kinit -kt /etc/krb5.keytab host/server1.ipa.local kinit: Program lacks support for encryption type while getting initial . You basically need two components to connect a RHEL system to Active Directory (AD). Previous message (by thread): [Freeipa-users] ipa-client-install fails on replica because of kinit cannot contact any KDC Next message (by thread): [Freeipa-users] ipa-client-install fails on replica because of kinit cannot contact any KDC Automatic installation of the packages required to join the system to the domain. Here is an excerpt from the MIT docs: Realm name¶ Although your Kerberos realm can be any ASCII string, convention is to make it the same as your domain name, in upper-case letters. The realm should always be in upper case. Run 'kpasswd' as a user 3. Minor code may provide more information', 851968)/("Cannot contact any KDC for realm 'EXAMPLE.COM'", -1765328228) Cannot connect to the IPA server XML-RPC interface: Kerberos error: ('Unspecified GSS failure. It is a simple omission of a single line in the /etc/sssd/sssd.conf file and is expected to be corrected in the V6.4 Red Hat release. The issue was I had my realm in lower case and not all parameters were fully entered. In /etc/krb5.conf I have: [libdefaults] default_realm = EXAMPLE.COM dns_lookup_kdc = true dns . SSSD fills logs with error message · Issue #1744 · SSSD/sssd