On both ipa-server-install and ipa-client-install we should check that the hostname returned by the system is all lowercase. Failing to do so may cause issues to programs trying to guess the host principal name in the keytab. They may try to use the mixed case name and fail to match the lower case name as krb libraries consider principal names case-sensitive.
One thing to test pre and post fix is unenrolling a host with a mixed-case hostname. I suspect that the server keytab won't be disabled.
I confirmed that this is the issue and that changing host name and re-installing with same arguments solves the problem.
We should at least document it in the release notes.
attachment freeipa-rcrit-754-hostname.patch
https://bugzilla.redhat.com/show_bug.cgi?id=688622
master: 15e213d
Metadata Update from @simo: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.0.5 GA
Login to comment on this ticket.