[2017-11-07 14:50] Alexander Bokovoy via FreeIPA-users:
If they all have the same hostname, you are better to enroll and share
keytab across all configurations. To do so, enroll first time and then
specify /etc/krb5.keytab from that installation with ipa-client-install
-k option. See ipa-client-install man page for more details.


Thanks for the advice. Would the kerberos keytab and the SSH host keys be the only possible/likely causes for problems?

Please note that I run FreeIPA with external nameservers, on which I added the necessary DNS entries for the FreeIPA servers manually. The FreeIPA client machines only have their respective A/AAAA records (and the corresponding reverse DNS records, of course).


Regards
Pascal
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to