hello all,

I'm doing bulk enrollment, with ipa-client-install -w mypassword .

But after this command when I launch #id test-user, I see in the kdc log that the client key for my host principal has expired, and the command fails.

This is because the host principal has the krbPasswordExpiration set to the time at wich the client join.

Am'I missing a step or is this behaviour not normal?

Marc SCHLINGER

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to