[Freeipa-users] Re: easy way to check ipa-client status
email--- via FreeIPA-users wrote:
So....rarely, a second server is built with the same fqdn, causing
an
issue with the original server kerberos realm membership...thing.
Is there an easy way to check/confirm this similar to how you'd check
the computer accounts for M$ AD?
IPA should already prevent re-enrollment by rejecting subsequent
attempts with "already enrolled".
I don't know how AD works but for IPA you can do: ipa host-show <fqdn>
to see if a host exists and is enrolled (keytab == True).
rob