Bug 1278295 - Wrong parameter for mkkrb5clnt in AIX client configuration section
Summary: Wrong parameter for mkkrb5clnt in AIX client configuration section
Status: NEW
Alias: None
Product: Fedora Documentation
Classification: Fedora
Component: freeipa-guide   
(Show other bugs)
Version: devel
Hardware: Unspecified Other
Target Milestone: ---
Assignee: Martin Kosek
QA Contact: Fedora Docs QA
Depends On:
TreeView+ depends on / blocked
Reported: 2015-11-05 08:10 UTC by Luc de Louw
Modified: 2015-11-05 08:10 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description Luc de Louw 2015-11-05 08:10:41 UTC
Description of problem:

The example "mkkrb5clnt -r EXAMPLE.COM -d example.com -c ipaclient.example.com -s ipaserver.example.com" configures the AIX client to use itself as the KDC.

Correct would be conifguring the ipaserver as KDC (-c parameter):

mkkrb5clnt -r EXAMPLE.COM -d example.com -c ipaserver.example.com -s ipaserver.example.com

Since mkkrb5clnt seems also writes to the ODM, editing /etc/krb5/krb5.conf does not change anything.

Version-Release number of selected component (if applicable):

Additional info:
mkkrb5clnt -U unconfigures krb5

Note You need to log in before you can comment on or make changes to this bug.