On Fri, Jan 4, 2013 at 6:52 PM, Sumit Bose <sb...@redhat.com> wrote:
> About delegating credentials, you might need to set the ok_as_delegate
> flag on the host/* service ticket. To do this you can call kadmin.local
> on the IPA server and then use
> modprinc +ok_as_delegate host/test-server-ipa.realm@REALM
> to set the flag.
I don't know why this host would have this flag set differently from other
hosts. And I get this error while trying to set or unset this flag.
kadmin.local: modprinc +ok_as_delegate host/ipa-w7.domain@REALM
modify_principal: Kerberos database internal error while modifying
For any other host as well BTW. I can't find anything relevant in the log
Freeipa-users mailing list