On Fri, Jan 4, 2013 at 6:52 PM, Sumit Bose <sb...@redhat.com> wrote: > About delegating credentials, you might need to set the ok_as_delegate > flag on the host/* service ticket. To do this you can call kadmin.local > on the IPA server and then use > > modprinc +ok_as_delegate host/test-server-ipa.realm@REALM > > to set the flag. >
I don't know why this host would have this flag set differently from other hosts. And I get this error while trying to set or unset this flag. kadmin.local: modprinc +ok_as_delegate host/ipa-w7.domain@REALM modify_principal: Kerberos database internal error while modifying "host/ipa-w7.domain@REALM For any other host as well BTW. I can't find anything relevant in the log files. -- # Han
_______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
