freeipa

#8490 It is not possible to edit KDC database when the FreeIPA server is running
Closed: fixed by rcritten. Opened by pcech.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1875001

Description of problem:
When the FreeIPA server is running it is not possible to edit a KDC database
with the help of "kadmin.local".
Version-Release number of selected component (if applicable):
RHEL-8.3
ipa-server-4.8.7-10.module+el8.3.0+7702+ced5f219.x86_64
krb5-server-debuginfo-1.18.2-5.el8.x86_64
Steps to Reproduce:
1.Install FreeIPA server
ipa-server-install --hostname=$hostname -r $REALM -n $(hostname -d) -p Passwd
-a Passwd --unattended --ip-address $ip_addr
2.kinit admin
3.kadmin.local
4.getprincs
Actual results:
# kadmin.local
Authenticating as principal admin/admin@TESTREALM.COM with password.
kadmin.local:  getprincs
get_principals: Server error while retrieving list.
Expected results:
getprincs should show principals in KDC database.

Metadata Update from @pcech:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1875001

Metadata Update from @abbra:
- Custom field changelog adjusted to kadmin.local command 'getprincs' is not supported
- Custom field test_case adjusted to ipatests/test_ipaserver/test_kadmin::TestKadmin::test_getprincs
- Issue assigned to abbra

PR: https://github.com/freeipa/freeipa/pull/5086

Metadata Update from @abbra:
- Custom field changelog adjusted to kadmin.local command 'getprincs' is now supported (was: kadmin.local command 'getprincs' is not supported)

master:

  • d00106b34de231bc67cdee904dbdccc21c8fcbc6 ipa-kdb: support getprincs request in kadmin.local
  • ba1a7b97c192221af8f4823b82ea1bcf9a2b491c ipa-kdb: test kadmin.local getprincs command

ipa-4-8:

  • ec8a560392c89da96a805e9779eaa2041dd992c1 ipa-kdb: support getprincs request in kadmin.local
  • f316d0118b8b00207e8d005f20d5de837c46a220 ipa-kdb: test kadmin.local getprincs command

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
ipatests/test_ipaserver/test_kadmin::TestKadmin::test_getprincs
kadmin.local command 'getprincs' is now supported
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.