<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body> <p dir="ltr">So can we have a user have with admin privilege or same as admin</p> <div class="quote">On 18/07/2014 7:04 pm, Martin Kosek <mkosek@redhat.com> wrote:<br type="attribution"> </div> <div class="BodyFragment"> <div class="PlainText">On 07/18/2014 03:16 PM, Eldo Joseph wrote:<br> > Hi,<br> > <br> > Is it possible to add a user principal with admin privileges. <br> > <br> > like kadmin: addprinc -randkey user1/admin@DOMAIN.COM<br> > <br> > when ever tried I got this <br> > "Kerberos database constraints violated"<br> > <br> > <br> > Thanks,<br> > Eldo <br> <br> We do not allow adding principals by kadmin on purpose. Kerberos principals of<br> FreeIPA user/service/host are being added via FreeIPA commands which fills all<br> required and expected attributes.<br> <br> We are considering allowing adding external realm principal though, ticket filed:<br> <br> <a href="https://fedorahosted.org/freeipa/ticket/4059">https://fedorahosted.org/freeipa/ticket/4059</a><br> <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1035494#c3">https://bugzilla.redhat.com/show_bug.cgi?id=1035494#c3</a><br> <br> HTH,<br> Martin<br> </div> </div> </body> </html>