On 19.10.20 11:38, Ronald Wimmer via FreeIPA-users wrote:
Today we did not manage to enroll new hosts with our enrollment user.
The only thing we changed is that we added the Permission "System:
Remove hosts" to the "Host Enrollment" role. The error we get is:
Joining realm failed: Failed to parse result: Insufficient access rights
Retrying with pre-4.0 keytab retrieval method...
Failed to parse result: Insufficient access rights
Failed to get keytab!
Failed to get keytab
child exited with 9
Can somebody state precisely which permissions/roles are needed in order
to enroll a new host by issuing the ipa-client-install command?