freeipa

#6007 kinit fails using a keytab
Closed: Invalid Opened by tbordaz.

Closed: Invalid
Reopen Issue

The attached test case (provisioning.sh) fails in freeipa-common-4.4.0.201606241513GITa6dffbf-0.fc24.noarch

It succeeds in freeipa-server-4.3.1-1.fc24.x86_64

kinit -k -i , authentication fails with

kinit: Password incorrect while getting initial credentials

If the keytab is removed and recreated then kinit succeeds

attachment
provisioning.sh

The reproducer works for me with older 4.4 without kerberos aliases patches.

By works I meant that I don't encounter the issue.

Sounds critical, given it is a regression.

closing based on:
"""
tbordaz: likely an invalid ticket. The pb is reproducible if keytab file existed before running the script.
"""

Metadata Update from @tbordaz:
- Issue assigned to someone
- Issue set to the milestone: 0.0 NEEDS_TRIAGE
Metadata
None
None
None
Low
defect
IPA
0
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.