freeipa

#7457 ipa realmdomains-mod: inadequate check for _kerberos TXT record for AD domains
Opened by frenaud. Modified

Open
Close Issue

Issue

When calling ipa realmdomains-mod, the code first validates the domains that are provided as arguments. It is checking that a _kerberos TXT record exists for the domain, but this check is inadequate when the domain is an AD domain because Active Directory domains never have _kerberos TXT record associated.
(see comments from @abbra in PR 1597).

We should use a different method.

Metadata Update from @fbarreto:
- Issue priority set to: low
- Issue set to the milestone: FreeIPA 4.8
Metadata
None
None
None
None
High
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.