One could integrate IPA and Satellite using this. While it is true that compliance carries with it concerns about enforcement, it is really just a counting tool in IPA.

Sorry, I don't understand what you are talking about :-)

I was very surprised when I found following message in /var/log/messages:

Mar  4 08:00:06 example ipa-compliance: IPA compliance checking failed: Error initializing principal host/example.com@E.TEST in /etc/krb5.keytab: (-1765328228, 'Cannot contact any KDC for requested realm')

Is it documented somewhere?

There is a man page for ipa-compliance, plugin help for entitle.

See also tickets 28, 79 and 278.

Deferred until we know that we do not want revive candlepin again.

This is a duplicate of #3739 and already fixed.