Hide Forgot
During install, freeipa overwrites the system krb5 with its own. However, in order to enable crypto-policies support for krb5, the default krb5 contains `includedir /etc/krb5.conf.d/` (and the crypto policies file is linked in to that directory). This directory is not present in krb5.conf after installing a client. I do see the line `/var/lib/sss/pubconf/krb5.include.d/` at the top, so I'm not sure whether the intent is to unify these directories in some way or whether the krb5.conf.d removal is accidental.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/5912
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/2026677635c6d4b086670cb9d8f3570bd1b95c27
freeipa-4.3.2-1.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-9c31a61e9e
freeipa-4.3.2-1.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-9c31a61e9e
freeipa-4.3.2-2.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-92a3655b70
freeipa-4.3.2-2.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-92a3655b70
freeipa-4.3.2-2.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.