<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body> To create user/host principal... In case if we want to integrate with cloudera <div class="quote">On 18/07/2014 8:48 pm, Rob Crittenden <rcritten@redhat.com> wrote: </div> <div class="BodyFragment"> <div class="PlainText">Eldo Joseph wrote: > So can we have a user have with admin privilege or same as admin admin privilege to do what? rob > > On 18/07/2014 7:04 pm, Martin Kosek <mkosek@redhat.com> wrote: > On 07/18/2014 03:16 PM, Eldo Joseph wrote: >> Hi, >> >> Is it possible to add a user principal with admin privileges. >> >> like kadmin: addprinc -randkey user1/admin@DOMAIN.COM >> >> when ever tried I got this >> "Kerberos database constraints violated" >> >> >> Thanks, >> Eldo > > We do not allow adding principals by kadmin on purpose. Kerberos > principals of > FreeIPA user/service/host are being added via FreeIPA commands which > fills all > required and expected attributes. > > We are considering allowing adding external realm principal though, > ticket filed: > > <a href="https://fedorahosted.org/freeipa/ticket/4059">https://fedorahosted.org/freeipa/ticket/4059</a> > <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1035494#c3">https://bugzilla.redhat.com/show_bug.cgi?id=1035494#c3</a> > > HTH, > Martin > > </div> </div> </body> </html>