freeipa

#9543 ipa-adtrust-install does not work with an AD administrator in the admins group
Opened by twoerner. Modified

Open
Close Issue

Issue

ipa-adtrust-install does not work with an AD administrator in the admins group:

ipa-adtrust-install -A administrator@ad.ipa.test

results in

Unrecognized error during check of admin rights: administrator: user not found

The same happens for AD\administrator and Administrator@AD.IPA.TEST

Steps to Reproduce

  1. Setup trust to AD
  2. Enable AD administrator to act as an IPA admin
  3. Deploy replica without --setup-adtrust
  4. Try to enable AD trust agent role on replica using the AD administrator

Actual behavior

Unrecognized error during check of admin rights: administrator: user not found

Expected behavior

No error

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server
ipa-server-4.11.0-5.el9.x86_64
ipa-client-4.11.0-5.el9.x86_64
389-ds-base-2.4.5-3.el9.x86_64
krb5-server-1.21.1-1.el9.x86_64

Metadata
None
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.