freeipa and kerberos failures

[lejeczek]

hi everyone

I'm trying freeIPA, trying to install a client and process 
fails. On the freeIPA kerberos end:

16 23 25 26}) 10.5.6.17: NEEDED_PREAUTH: 
host/dzien.priv.xx.xx.priv.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x 
for 
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x, 
Additional pre-authentication required
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606061](info): preauth (encrypted_timestamp) verify 
failure: Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23 
25 26}) 10.5.6.17: PREAUTH_FAILED: 
host/dzien.priv.xx.xx.priv.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x 
for 
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x, 
Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23 
25 26}) 10.5.6.17: NEEDED_PREAUTH: 
host/dzien.priv.xx.xx.priv.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x 
for 
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x, 
Additional pre-authentication required
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606060](info): preauth (encrypted_timestamp) verify 
failure: Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606060](info): AS_REQ (8 etypes {18 17 20 19 16 23 
25 26}) 10.5.6.17: PREAUTH_FAILED: 
host/dzien.priv.xx.xx.priv.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x 
for 
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x at PRIVATE.xx.xx.PRIVATE.xx.xx.x, 
Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x 
krb5kdc[606060](info): closing down fd 11

I make sure both server's and clients time is synced.
I'm on centos 7.4 with krb5-libs-1.15.1-8.el7.x86_64

Would somebody be keen to shed more light on as what might 
be the problem?

many thanks, L.