[Freeipa-devel] [PATCH] configure ipa_pwd_extop on replicas

[Simo Sorce]

Rob Crittenden wrote:
> We weren't setting up the password extended operation plugin on replicas 
> so any new user's added there (or passwords changed) would not 
> update/create a krbPrincipalKey attribute. This meant that user's added 
> there couldn't use their passwords for kinit (or anything else) because 
> it didn't exist.

Wow I totally missed that :-/

Thanks for finding this one, very well done and full ack on all changes.

Simo.