[Freeipa-users] Re: Old users cannot login to new freeIPA client machine

[Alexander Bokovoy]

On ke, 10 maalis 2021, Sam Bell via FreeIPA-users wrote:
> Yeah the password is right.
> On a separate note, on the client machine I had login problem on both Ubuntu(installed before)
> and Fedora. So the problem could be with server.
>
> For pre-authentication I used following commands:
> # kadmin.local
> kadmin.local: modprinc +requires_preauth testuser
> Principal "[e-mail]" modified.

Why did you do this step?

All IPA users are using preauthentication by default, there is no need
to operate on low level Kerberos principals and no need to use kadmin at
all.