Ryan Slominski via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
What is the status of the IPA integration with Kerberos utilities
such
as kadmin (kadmin.local) and kdb5_util? Can they be used or are they
not supported. If not supported maybe they should report an error or
warning.
They *can* be used, but it's generally the wrong thing to do. IPA has a
lot of specific requirements that aren't defaults for these tools, and
these tools aren't IPA-aware. We generally don't support their direct
use, but IPA will on occasion use them for things.
(I will leave it to others to better reply to the rest of your message.)
Thanks,
--Robbie