Issue #6036: 'kinit -E' does not work for IPA user - freeipa

Although enterprise principals for trusted domains now are working as expected they do not work for the local domain:

# kinit -E admin@IPA.DEVEL
kinit: Client 'admin\@IPA.DEVEL@IPA.DEVEL' not found in Kerberos database while getting initial credentials

master:

6d6da6b281173737bd31ba4845af11a097846c05 kdb: check for local realm in enterprise principals

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1356134

Test case pushed to master:

648b5afa2f2d01d99c1cf2d1f4a87a5da4461246 Tests: IPA user can kinit using enterprise principal with IPA domain

Metadata Update from @sbose:
- Issue assigned to sbose
- Issue set to the milestone: FreeIPA 4.4.1

Feb 27, 2017

Assignee

sbose

Tags

None

Blocking

None

Depending on

None

Priority

Normal

type

defect

component

KDC LDAP driver

on_review

rhbz

https://bugzilla.redhat.com/show_bug.cgi?id=1356134

test_coverage

yes