I need to add principal alias to a service from the client in which it is managed by.
kinit -k -t /etc/krb5.keytab
---
On the last command it returns the following error:
---
ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the 'krbPrincipalName' attribute of entry 'krbprincipalname=myservice/
myclient.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com'.
---
However I need to set this role (or privilege) globally. On the other hand, any new host enrolled after ipa-client-install has that privilege allowed.
Thank you