On 08/10/2017 10:54 AM, Bonnie King wrote: > Thanks, these have been pushed. > > On 08/10/2017 11:24 AM, Orion Poplawski wrote: >> So looks like we still need: >> krb5-server >> krb5-server-ldap >> krb5-devel >> krb5-pkinit > This is becoming a rabbit hole... I'm testing this on an IPA server and now kerberos and IPA are out of sync: krb5kdc: Database module does not match KDC version - while initializing database for realm NWRA.COM So for this to work on IPA servers (and perhaps clients?), the IPA updates would need to be added. -- Orion Poplawski Technical Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane [log in to unmask] Boulder, CO 80301 http://www.nwra.com