URL: https://github.com/freeipa/freeipa/pull/5617 Author: antoniotorresm Title: #5617: Add checks to prevent adding auth indicators to internal IPA services Action: opened

PR body: """ Authentication indicators should not be enforced against internal IPA services, since not all users of those servers are able to produce Kerberos tickets with all the auth indicator options. This includes `host`, `ldap`, `HTTP` and `cifs` in IPA server and `host` and `cifs` in IPA clients.

Fixes: https://pagure.io/freeipa/issue/8206 Signed-off-by: Antonio Torres antorres@redhat.com """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5617/head:pr5617 git checkout pr5617