[...]
Please spend some time reading the documentation. It is vast and has a
lot of answers to questions people keep asking on these lists.
ipa service-allow-retrieve-keytab HTTP/cluster.idm.example.com --hosts={node01.idm.example.com,node02.idm.example.com}