Notice the server where the ipa-deluser is connecting. The server in dns is server.ipatest.com. I know you might think this is caused by Bug 458869 but it's not, because, even if it were, ipa-deluser would always connect to the same server. # cat /etc/ipa/ipa.conf [defaults] realm=IPATEST.COM server=fake.ipatest.com domain=ipatest.com # ipa-deluser -v jdoe Connecting to IPA server: https://fake.ipatest.com/ipa/xml Could not initialize GSSAPI: An invalid name was supplied/Hostname cannot be canonicalized # vim /etc/ipa/ipa.conf # cat /etc/ipa/ipa.conf [defaults] #realm=IPATEST.COM server=fake.ipatest.com domain=ipatest.com # ipa-deluser -v jdoe Connecting to IPA server: https://server.ipatest.com/ipa/xml Connecting to IPA server: https://server.ipatest.com/ipa/xml [snip] jdoe not found
master: a9e8a72059ca5a6db13a9835d20f68dd16ce9a7a
fix verified: [root@jennyv3 ~]# ipa-deluser -v tester Connecting to IPA server: https://fake.bos.redhat.com/ipa/xml Connecting to IPA server: https://fake.bos.redhat.com/ipa/xml Could not initialize GSSAPI: An invalid name was supplied/Hostname cannot be canonicalized