Red Hat Bugzilla – Bug 571896
kpasswd does not work if the kdc is setup as a slave server.
Last modified: 2010-04-28 11:03:33 EDT
Description of problem:
sssd needs to be able to differentiate between the kerberos kdc server from the kerberos admin server.
My kdc is kerberos.boston.redhat.com
admin server is kerberos.corp.redhat.com
I propose the following fix: we add an option krb5_kadmin, which is optional. If it is unspecified, we assume that krb5_kdcip is also a kadmin server, as we have been doing.
we should really use krb5.conf here imo
Simo, can you please clarify that comment? I don't understand what you're proposing.
This is being tracked upstream in ticket:
This bug has been fixed upstream. A package will be forthcoming in Fedora shortly.
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.