On 08/10/2017 12:37 PM, Orion Poplawski wrote: > This is becoming a rabbit hole... > > I'm testing this on an IPA server and now kerberos and IPA are out of sync: > > krb5kdc: Database module does not match KDC version - while initializing > database for realm NWRA.COM > > So for this to work on IPA servers (and perhaps clients?), the IPA updates > would need to be added. We'll go down the hole and sort it out. Thanks again for testing. -- Bonnie King Group Leader Scientific Linux & Architecture Management Fermi National Accelerator Laboratory 630-840-8761 office 773-799-4608 cell www.fnal.gov