On Fri, Jan 4, 2013 at 6:52 PM, Sumit Bose <sb...@redhat.com> wrote:

> About delegating credentials, you might need to set the ok_as_delegate
> flag on the host/* service ticket. To do this you can call kadmin.local
> on the IPA server and then use
> modprinc +ok_as_delegate host/test-server-ipa.realm@REALM
> to set the flag.

I don't know why this host would have this flag set differently from other
hosts. And I get this error while trying to set or unset this flag.

kadmin.local:  modprinc +ok_as_delegate host/ipa-w7.domain@REALM
modify_principal: Kerberos database internal error while modifying

For any other host as well BTW. I can't find anything relevant in the log


# Han
Freeipa-users mailing list

Reply via email to