[Freeipa-users] How to change the Kerberos Master Key?

2016-06-28 Thread Nicholas Hinds
Hi, I have been trying to change the Kerberos Master Key of my FreeIPA installation, without success. On test installations, I have tried following the instructions on http://web.mit.edu/kerberos/krb5-latest/doc/admin/database.html#updating-the-master-key, but from the "kdb5_util

[Freeipa-users] Service account for host enrolment needs permission to read itself

2016-06-15 Thread Nicholas Hinds
Hi all, I have been exploring using a service account with restricted permissions to add and enrol hosts, rather than using an administrative user. I based the account details on an earlier posting to this list ( https://www.redhat.com/archives/freeipa-users/2016-January/msg00524.html), but ran