Created attachment 925498 [details]
Log of adtrust installation attempt

Description of problem:
From a fresh install of FreeIPA, ADTrust installation fails. The key part is:

  [5/20]: adding cifs Kerberos principal
ipa.ipalib.plugins.service.service_add: DEBUG    raw: service_add(u'cifs/lorna.dev.blackhats.net.au.NET.AU')
ipa.ipalib.plugins.service.service_add: DEBUG    service_add(u'cifs/lorna.dev.blackhats.net.au.NET.AU', force=False, all=False, raw=False, no_members=False)
ipa.ipalib.plugins.host.host_show: DEBUG    raw: host_show(u'lorna.dev.blackhats.net.au')
ipa.ipalib.plugins.host.host_show: DEBUG    host_show(u'lorna.dev.blackhats.net.au', rights=False, all=False, raw=False, no_members=False)
ipa.ipalib.plugins.service.service_add: DEBUG    IPA: DNS A record lookup failed for lorna.dev.blackhats.net.au
ipa         : DEBUG    Starting external process
ipa         : DEBUG    args=ipa-getkeytab --server lorna.dev.blackhats.net.au --principal cifs/lorna.dev.blackhats.net.au.NET.AU -k /etc/samba/samba.keytab
ipa         : DEBUG    Process finished, return code=9
ipa         : DEBUG    stdout=
ipa         : DEBUG    stderr=Operation failed! PrincipalName not found.


Version-Release number of selected component (if applicable):
freeipa-server-trust-ad-3.3.5-1.fc20.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Install Freeipa server and provision
2. Attempt to install adtrust

Additional:

Attached complete -d output from attempt to configure service.