freeipa

#9469 When setting up IPA-IPA trust, make sure TDO principal is provisioned with the correct salt
Closed: duplicate by abbra. Opened by abbra.

Closed: duplicate
Reopen Issue

According to MS-KILE 3.3.5.6.2, https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kile/856a8663-6c36-46f0-9f6f-1a28a700d0b5, the salt for cross-realm principals must be of a specific form. When using our normal code, we cannot generate that with getkeytab extended operation.

This is duplicate of https://pagure.io/freeipa/issue/9471

Metadata Update from @abbra:
- Issue close_status updated to: duplicate
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.