Patrick Dung via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
Hello, After upgrading to Fedora 29, Kerberos on the primary Free
IPA
is not working. Another FreeIPA replica failed to start. It is because
Kerberos (GSSAPI) is not working and ns-slapd cannot
start. Replication agreement cannot be established via Kerberos
(GSSAPI)
This should be addressed in the latest versions of krb5
(krb5-1.16.1-23.fc29). Let me know if it's not by filing a bug!
Thanks,
--Robbie