https://bugzilla.redhat.com/show_bug.cgi?id=1015896
--- Comment #1 from Bryan Schneiders bschneiders@woti.com --- This is missing from the Client section on the same page as well:
If ipa-getkeytab command is run on the NFS client, then save the keys directly to the host keytab. For example:
[jsmith@server ~]$ ipa-getkeytab -k /etc/krb5.keytab -p host/nfs-client-server.example.com@EXAMPLE.COM
For a Red Hat Enterprise Linux machine, that's all you need to do.