[Freeipa-devel] [freeipa PR#5889][opened] Fall back to krbprincipalname when validating host auth indicators

[rcritten]

   URL: https://github.com/freeipa/freeipa/pull/5889
Author: rcritten
 Title: #5889: Fall back to krbprincipalname when validating host auth indicators
Action: opened

PR body:
"""
When adding a new host the principal cannot be determined because it
relies on either:

a) an entry to already exist
b) krbprincipalname be a component of the dn

As a result the full dn is being passed into ipapython.Kerberos
which can't parse it.

Look into the entry in validate_validate_auth_indicator() for
krbprincipalname in this case.

https://pagure.io/freeipa/issue/8206

Signed-off-by: Rob Crittenden <rcritten(a)redhat.com&gt;
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5889/head:pr5889
git checkout pr5889