[Freeipa-users] ipa-getkeytab: PrincipalName not found

[Harald Dunkel]

Hi folks,

maybe I missed something, but shouldn't admin have sufficient
privileges to run

# ipa-client-install --hostname stretch1.vs.example.de --no-ssh --no-sshd --no-nisdomain
--no-sudo --no-ntp --no-dns-sshfp
# reboot
:
:
# kinit admin              
# ipa-getkeytab -s ipa1.example.de -p HTTP/stretch1.vs.example.de -k
/etc/apache2/apache2.keytab

? 

ipa-getkeytab failed with 

	Failed to parse result: PrincipalName not found.

I would have expected it to create the principal on the fly. 

"admin" was created at freeipa install time on the first server,
AFAIR. It is member of the "admins" and "trust admins" groups.


I am concerned that I corrupted something. Every helpful comment 
is highly appreciated.

Harri