Multiple projects (Foreman, ManageIQ, Spacewalk, Ipsilon) run ipa-getkeytab for HTTP/ principal. All of them need to figure out the hostname of the IPA server. Each project likely uses its own method, and possibly some of them not the ideal one.

Make it possible to invoke ipa-getkeytab without the -s option and default to the IPA server which IPA-enrolled client finds the best.