freeipa

#6087 'user-add' requires non-required attribute when run without krb ticket
Closed: Invalid Opened by lryznaro.

Closed: Invalid
Reopen Issue

Environment: IPA 4.4.0

When trying to add user via CLI without any kerberos ticket, inputting "full name" attribute is required, although it should not be required by default. Only then the command fails with authentication error.

$ kdestroy
$ ipa user-add tuser --first test --last user
Full name: testuser
ipa: ERROR: did not receive Kerberos credentials

This problem doesn't arise when creating user with valid admin ticket.

The reason is that CLI first gathers info and then contacts server.

I'd close as invalid.

The point is mainly the fact, that it attempts to gather info that is not normally required - when creating user with admin ticket, the command in the description is fully sufficient to create a user, full name is not required.

I see, but I'm unable to reproduce. What is your IPA version?

# rpm -q freeipa-server
freeipa-server-4.4.0.201607151538GIT37bfd1f-0.fc24.x86_64
# ipa user-add tuser --first test --last user
ipa: ERROR: did not receive Kerberos credentials

$ rpm -q freeipa-server
freeipa-server-4.4.0.201607151246GIT37bfd1f-0.fc24.x86_64

Although now, on the same IPA server as before, the command behaves properly. I've been running some other tests on that server, maybe it was caused by some changes in environment. Please close the ticket as invalid, if I encounter the issue again, I will investigate.

closing as invalid given comments 3 and 4.

Metadata Update from @lryznaro:
- Issue assigned to someone
- Issue set to the milestone: 0.0 NEEDS_TRIAGE
Metadata
None
None
None
Normal
defect
IPA
0
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.