Description of problem: The example "mkkrb5clnt -r EXAMPLE.COM -d example.com -c ipaclient.example.com -s ipaserver.example.com" configures the AIX client to use itself as the KDC. Correct would be conifguring the ipaserver as KDC (-c parameter): mkkrb5clnt -r EXAMPLE.COM -d example.com -c ipaserver.example.com -s ipaserver.example.com Since mkkrb5clnt seems also writes to the ODM, editing /etc/krb5/krb5.conf does not change anything. Version-Release number of selected component (if applicable): 17 Additional info: mkkrb5clnt -U unconfigures krb5
Guide is no longer maintained: https://www.freeipa.org/page/Upstream_User_Guide