email--- via FreeIPA-users wrote:
> So....rarely, a second server is built with the same fqdn,  causing an
> issue with the original server kerberos realm membership...thing.
> Is there an easy way to check/confirm this similar to how you'd check
> the computer accounts for M$ AD?

IPA should already prevent re-enrollment by rejecting subsequent
attempts with "already enrolled".

I don't know how AD works but for IPA you can do: ipa host-show <fqdn>
to see if a host exists and is enrolled (keytab == True).

FreeIPA-users mailing list --
To unsubscribe send an email to

Reply via email to