[Freeipa-users] ipa-getkeytab during %post

[Simo Sorce]

On Wed, 2012-02-08 at 11:13 +0000, Dale Macartney wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> morning all...
> 
> i'm dabbling with automated provisioning of ipa client servers, and i'm
> a little perplexed on how to add a keytab to a system during the %post
> section of a kickstart...
> 
> i've run ipa-client-install -U -p admin -w redhat123 which works
> perfect, but in order to run ipa-getkeytab i need a tgt, which doesn't
> appear to be generated during the ipa-client-install.
> 
> any suggestions on doing this during a post?

What version of ipa-client-install are you using ?

Newer versions (2.x) should fetch a keytab for your system (needs
credentials or OTP password.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York