freeipa

#7269 ipa-client-install should warn about existing krb5.keytab
Opened by frenaud. Modified

Open
Close Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1512972

Description of problem:
When enrolling a client with an existing /etc/krb5.keytab, the
ipa-client-install appends the new keys to the keytab file without a warning
Version-Release number of selected component (if applicable):
4.5.0-21
How reproducible:
Always
Steps to Reproduce:
1. Find a system with an existing Keytab file
2. Enroll the System with ipa-client-install to an IPA environment
3. Use ktutil -> rkt -> l and find the keys appended
Actual results:
See reproducer
Expected results:
ipa-client-install should warn the user about an existing keytab file and let
the user choose to either overwrite the keytab or append the new keys
Additional info:

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1512972

Metadata Update from @pvoborni:
- Issue tagged with: ux
Metadata
None

ux

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.