Red Hat Bugzilla – Bug 768316
[RFE] ipa-getkeytab should auto-detect the ipa server name
Last modified: 2016-11-04 01:42:57 EDT
Description of problem: Ipa-getkeytab command expect the ipa server name and it fails if no server name is provided. Currently the ipa server name has to be mentioned even if the command is executed from ipa server or client. expectation: ipa-getkeytab detects the ipa server(if configured) Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. execute ipa-getkeytab without -s <ipa_server> option Actual results: ipa-getkeytab fails if server name is not provided. ipa-getkeytab -p HTTP/vm123.example.com -k /tmp/HTTP_vm123.example.com Usage: ipa-getkeytab [-qP?] [-q|--quiet] [-s|--server Server Name] [-p|--principal Kerberos Service Principal Name] [-k|--keytab Keytab File Name] Expected results: ipa-getkeytab detects the ipa server name if the box is configured as ipa client.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/2203
Has been fixed upstream: master: f12f56fe8d607240efd7e8c8a942554bdd3b980f Support sourcing the IPA server name from config
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune@redhat.com with any questions
Verified on RHEL73 using ipa-server-4.4.0-11.el7.x86_64 ===IPA Client==== [root@client ~]# ipa-getkeytab -p ldap/master.test-relm.test -k /tmp/ldap1.keytab Keytab successfully retrieved and stored in: /tmp/ldap1.keytab [root@client ~]# ipa-getkeytab -p HTTP/master.test-relm.test -k /tmp/http.keytab Keytab successfully retrieved and stored in: /tmp/http.keytab [root@client ~]# ipa-getkeytab -p cifs/master.test-relm.test -k /tmp/cifs.keytab Keytab successfully retrieved and stored in: /tmp/cifs.keytab ===IPA Master=== [root@master ~]# ipa-getkeytab -p ldap/master.test-relm.test -k /tmp/ldap1.keytab Keytab successfully retrieved and stored in: /tmp/ldap1.keytab [root@master ~]# ipa-getkeytab -p HTTP/master.test-relm.test -k /tmp/http.keytab Keytab successfully retrieved and stored in: /tmp/http.keytab [root@master ~]# ipa-getkeytab -p cifs/master.test-relm.test -k /tmp/cifs.keytab Keytab successfully retrieved and stored in: /tmp/cifs.keytab
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2404.html