freeipa

#7016 ipa_server_certinstall - restart krb5kdc service after kdc cert is installed
Closed: fixed Opened by mreznik.

Closed: fixed
Reopen Issue

Currently krb5kdc service restart is not implemented in "ipa_server_certinstall.py" code and after installing kdc certificate and trying to get anonymous ticket with "kinit -n" we are getting: kinit: Preauthentication failed while getting initial credentials. After the service restart it works fine. This ticket was opened in order to implement the restart.

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.5.4
- Issue tagged with: easyfix

How to reproduce:
1. ipa-server-install -U -n ipa.test -r IPA.TEST -p Secret123 -a Secret123 --domain-level=1 --setup-dns --forwarder x.x.x.x --auto-reverse --no-pkinit
2. git clone https://github.com/freeipa/freeipa-tools.git
3. cd freeipa-tools && ./makepki.sh
4. pk12util -o ca1-kdc.p12 -d nssdb -n ca1/server-kdc
5. ipa-cacert-manage install -vvv pki/ca1.crt
6. ipa-certupdate
7. ipa-server-certinstall -k ca1-kdc.p12 --pin 1234
8. kinit -n

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.5.5 (was: FreeIPA 4.5.4)

master:

  • 59802d37d17a33fc2417aa68dd10b3373e1800bd Add a notice to restart ipa services after certs are installed

ipa-4-6:

  • 9175b9c12d9e488c38281f91a961db4083565281 Add a notice to restart ipa services after certs are installed

ipa-4-5:

  • 512bf317b191ffefcc9baca4f766c1fb010f344f Add a notice to restart ipa services after certs are installed

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

easyfix

None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.