I can actually create a principal foo/admin by creating a user foo-admin and change the
principal. But kinit can’t use it, so it’s not terribly useful.
On Feb 13, 2018, at 4:52 PM, Charles Hedrick
<hedrick(a)rutgers.edu> wrote:
There’s a convention of creating admin instances for users, usually named user/admin. IPA
doesn’t seem to allow such instances. Is there a way to make them work?
As far as I can tell the instance can only be a hostname. That doesn’t seem like a
sensible restriction.