#9290 idm:client is missing dependency on krb5-pkinit.
Closed: fixed by frenaud. Opened by frenaud.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 2149889

Description of problem: idm:client is missing dependency on krb5-pkinit
Version-Release number of selected component (if applicable):
ipa-server-4.9.10-8.module+el8.8.0+17351+9a3fb056.x86_64
ipa-client-4.9.10-8.module+el8.8.0+17351+9a3fb056.x86_64  
How reproducible: Always
Steps to Reproduce:
1. dnf module install -y idm:DL1/client
2. [root@client tls]# ipa-client-install --domain testrelm.test --realm TESTRELM.TEST  
--server=master.testrelm.test 
--pkinit-identity=FILE:/etc/pki/tls/certs/client.pem,/etc/pki/tls/private/client.key 
-U --pkinit-anchor=FILE:/tmp/kdc.pem -d
Actual results:
ipa-client-install fails with the error due to missing krb5-pkinit package.
'dnf module install -y idm:DL1/{client,dns}' is run the package is installed and ipa-client-install with pkinit passed.
Client uninstall complete.
Kerberos PKINIT authentication failed: CalledProcessError(Command ['/usr/bin/kinit', '-c', '/tmp/krbccjsckiuc2/ccache', '-X', 'X509_anchors=FILE:/tmp/kdc.pem', '-X', 'X509_user_identity=FILE:/etc/pki/tls/certs/client.pem,/etc/pki/tls/private/client.key', 'host/client.testrelm.test@TESTRELM.TEST'] returned non-zero exit status 1: 'kinit: Generic preauthentication failure while getting initial credentials\n')
The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
Expected results:
ipa-client-install is successful.
Additional info:

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2149889

Issue linked to bug 2149889

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6586

master:

  • 827dc9afc9a82e14b03dc8bd42535ccf48712ec3 Spec file: ipa-client depends on krb5-pkinit-openssl

ipa-4-9:

  • d7c5fe5f1cc3b68492da27cf4ea25b611412c834 Spec file: ipa-client depends on krb5-pkinit-openssl

ipa-4-10:

  • 2d0a0cc40fb8674f30ba62980b1953cef840009e Spec file: ipa-client depends on krb5-pkinit-openssl

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2149889, https://bugzilla.redhat.com/show_bug.cgi?id=2150335 (was: https://bugzilla.redhat.com/show_bug.cgi?id=2149889)

Issue linked to RHEL9.2 bug 2150335

Metadata