On 08/10/2017 10:54 AM, Bonnie King wrote:
> Thanks, these have been pushed.
> 
> On 08/10/2017 11:24 AM, Orion Poplawski wrote:
>> So looks like we still need:
>> krb5-server
>> krb5-server-ldap
>> krb5-devel
>> krb5-pkinit
> 

This is becoming a rabbit hole...

I'm testing this on an IPA server and now kerberos and IPA are out of sync:

krb5kdc: Database module does not match KDC version - while initializing
database for realm NWRA.COM

So for this to work on IPA servers (and perhaps clients?), the IPA updates
would need to be added.

-- 
Orion Poplawski
Technical Manager                          720-772-5637
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       [log in to unmask]
Boulder, CO 80301                   http://www.nwra.com