Public bug reported: Heimdal considers a principal as existing if an LDAP object with a matching krb5PrincipalName exists. It should probably ALSO check for existing krb5key records. When creating a new principal it should search for objects with krb5PrincipalNames set and add krb5Keys to them.
This will allow any Add User process to behave a bit more smoothly. One system creates a LDAP object, then asks the KDC to populate the Kerberos fields. ** Affects: heimdal (Ubuntu) Importance: Undecided Status: Unconfirmed -- hdb-ldap should add principal entries to existing objects https://launchpad.net/bugs/69101 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs